Yubico's answer to this is to own & register two of them against the account/software they are being used as the 2nd factor for. Some accounts also offer someth

Yubico's answer to this is to own & register two of them against the account/software they are being used as the 2nd factor for. Some accounts also offer something short of the whirlwind but not as socially engineerable as the obvious easy, hassle free methods - for example Google issues backup codes for signing into the account when you lose all your means of 2FA.