Given that I run a Linux desktop, and not Ubuntu, I think I'm less likely to be swept up in a mass hack on my desktop than on my phone. I bring my phone with m

Given that I run a Linux desktop, and not Ubuntu, I think I'm less likely to be swept up in a mass hack on my desktop than on my phone. I bring my phone with me in lots of circumstances where I don't bring my security key, so yeah I think it's more likely to be lost/stolen. Also, TOTP has a MITM problem that U2F/Webauthn doesn't have.