[usr1106]

What kind of 2FA? I run OTP on my work laptop. Yes, it's maybe not really a 2nd factor if someone had access to my laptop with LUKS open. But at least I don't expect any automated attack because it's my own piece of code using an otp library.

[ffsm8]

One of the contexts is login to the laptop , would be pretty challenging to facilitate on device ;)

Sadly, biometric authentication as 2fa is not sufficient for that.

[zikduruqe]

Same here. If someone is accessing my OTP codes from my laptop, I've got bigger problems to worry about.