I'm constantly disappointed by lack of support for U2F keys, especially by domain name registrars (ghandi is there only one but unfortunately they come with their own questionable t ToS). No matter how well protected your accounts are, if you lose your domain, they're all toast.