I'm an unabashed security-key fan, so some folks in the forums think I'm shilling when I suggest that people need more than two separate physical authenticators, and that one of them should be offsite. I'm not. shkspr.mobi/blog/2022/06/i…