I've been disappointed in Yubico since I saw their advisory downplaying the bug in the original OpenPGP support which meant it didn't require a PIN to perform crypto operations (and of course, this can be done over the NFC interface too): https://developers.yubico.com/ykneo-openpgp/SecurityAdvisory...