The vulnerability, as another commenter mentions, is extremely hard to exploit and requires both physical access and the specific accounts to clone the key for.

The vulnerability, as another commenter mentions, is extremely hard to exploit and requires both physical access and the specific accounts to clone the key for. That may be too much of a risk for enterprises, but as a personal security key? That seems like a completely reasonable choice to make.