> The new service will continue to require a physical USB key in addition to a second physical key for greater protection.
I look forward to more details so that I can understand the reason for having two physical keys. What threats can defeat one U2F key but not two?