> For an individual, the answer there might be to limit the usage of the device to your "core" services, and rely on good password hygiene for everything else.

> For an individual, the answer there might be to limit the usage of the device to your "core" services, and rely on good password hygiene for everything else. What's the advantage here over password + yubikey? Isn't password + yubikey always going to be at least as secure as password, even if the yubikey gets lost/stolen/compromised?