Why does it need to support u2f? Would be nice if it did but from a security point of view,it does support two factor authentication(TOTP). If you're concerned

Why does it need to support u2f? Would be nice if it did but from a security point of view,it does support two factor authentication(TOTP). If you're concerned about the authenticator app being compromised then a dedicated phone or hardware token device can be configured. As I said,u2f has better security but at least financially speaking,time based OTP has a lower barrier of entry while being superior in it's security to most non-u2f alternates (phone call,sms,etc...). I don't think lack of u2f alone disqualifies it from being considered as having top tier authentication.