> ... using keys is actually more convenient and significantly more secure. And for those for whom it's an option, using U2F keys (like Yubikeys) is now easily

> ... using keys is actually more convenient and significantly more secure. And for those for whom it's an option, using U2F keys (like Yubikeys) is now easily doable with SSH. So unless the attacker can hack the HSM inside your Yubikey, he's simply not getting your private SSH keys.