That's a good idea. I've been only enabling 2fa when I can use two forms of it (totp + u2f token), but that's still vulnerable since I often carry both of those

That's a good idea. I've been only enabling 2fa when I can use two forms of it (totp + u2f token), but that's still vulnerable since I often carry both of those on my person at the same time.