[andrewaylett]

My password manager requires a hardware token to log in. So now the second factor is "has a device I've logged into my password manager with, or the hardware token for the password manager".

[seoulmetro]

Which isn't something you have. It's something you know, gated behind something you have.