Add FIDO2 to devices that don't have built-in security hardware. There's a little extra setup work, but the price is competitive.