One explanation is that a physical device that plugs into a USB port is required to use a universal security key, such as the Yubikey or Google Titan, to authenticate logins. However, these keys are more secure than the software tool and are waterproof, dust-resistant, crush-proof, and water-resistant. They are also more challenging to troubleshoot than a 2FA app.