> Its huge downside is that it's a second factor which doesn't protect against a compromised device. That's true, but I think that if people used an encrypted

> Its huge downside is that it's a second factor which doesn't protect against a compromised device. That's true, but I think that if people used an encrypted private key (protected by a passphrase), then that would be less of an issue.