A random lock (or a street-level camera FWIW [1]) would be better positioned to extract enough data to reproduce the key. U2F tokens are "Trusted Platform Modu

A random lock (or a street-level camera FWIW [1]) would be better positioned to extract enough data to reproduce the key. U2F tokens are "Trusted Platform Modules" of sorts. The keys themselves are never visible to the devices you plug them in. They are capable of answering challenge/responses, and having the URL part of the challenge prevents phishing[2]. I am much more comfortable not typing any password on a public computer. [1]: https://www.wired.com/2015/09/lockpickers-3-d-print-tsa-luggage-keys-leaked-photos/ https://www.wired.com/2015/09/lockpickers-3-d-print-tsa-lugg... [2]: https://en.wikipedia.org/wiki/Universal_2nd_Factor#Advantages_(and_disadvantages) https://en.wikipedia.org/wiki/Universal_2nd_Factor#Advantage...