Gmail has a hardware token with fido u2p

http://googleonlinesecurity.blogspot.com/2014/10/strengthening-2-step-verification-with.html