I also just realized using #yubikey makes for a much easier failure scenario especially when I consider "what if my phone was lost/destroyed too" (Maybe I got lost in the woods or in an airplane crash who knows) Describing how to get to Synology and restore Aegis backup gets complicated. But "use yubikey from my keychain or the backup one from the office safe" is much easier to describe