Currently the only available method for Multi-Factor Authentication is TOTP (6 digit codes from MFA app). While this is great, TOTP can still be phished. Additionally, they can often be somewhat inconvinient, as you need to have your phone nearby when you authenticate.
I think that both for security and convinience, support for hardware keys, such as the YubiKeys, is a must.
The best way to go about it is probably with FIDO2, which is the latest standard for such keys. Support for the older U2F is probably a good idea too, to support legacy devices.
