Hacker News Reader

The comparison is to "One Time Passwords (OTP)via SMS phone messages."

Given the vulnerabilities in GSM, that's not a high bar. http://security.stackexchange.com/questions/11493/

The even more relevant comparison is to TOTP. Many places support 2Fa over TOTP, far viewer support 2Fa over U2F.

The big problem with TOTP is that real time attacks can still get you when you get MITM.

Edit: I now understand you were talking about the article, not the technology itself

Also totp hardware tokens suck (get out of sync) and totp smartphone apps suck because Android phones are so insecure/malware ridden.

You forgot "including"