I have a hard time adding protonmail to my "generally regarded as safe" mail provider list when they haven't been able to implement Webauthn security key suppor

I have a hard time adding protonmail to my "generally regarded as safe" mail provider list when they haven't been able to implement Webauthn security key support (aka U2F security keys / FIDO security keys). Yes, they support Multi-Factor authentication, but only via phishable methods (TOTP)[1]. They have been "trying" for years[2] to implement U2F but for some reason haven't been able to figure it out yet /shrug [1] https://protonmail.com/support/knowledge-base/two-factor-authentication/ https://protonmail.com/support/knowledge-base/two-factor-aut... [2] https://twitter.com/protonmail/status/1300758061255217153?lang=en https://twitter.com/protonmail/status/1300758061255217153?la...