I think the culture the issue... I could be wrong but it seems like a lot of companies ask new employees to use their Authenticator phone app for Google login,

I think the culture the issue... I could be wrong but it seems like a lot of companies ask new employees to use their Authenticator phone app for Google login, VPNs, SSO etc and if you want to use your hardware key you have to seek out a dev-ops person to configure it special for you. The majority of the 2FA settings I've seen for popular platforms (e.g. Twitch) don't let you use keys or you have to dig for it.