[allset_]

USB mass storage based authentication also does not protect against malware stealing the keys. A YubiKey (or similar token) performs all of the cryptographic operations in a separate environment that malware cannot access.

[ashtonkem]

Yes, that would be a “remote copy” since it doesn’t require physical access to the u2f token.