Really nice article!

They mention twice that Yubikeys are expensive, but for SSH their cheaper FIDO2 keys work:

https://www.yubico.com/product/security-key-series/security-...