Hacker News Reader

Losing one.

Number two is to throw in your safe and forget about.

This is definitely a valid consideration. Perhaps they are replacing "2fa recovery codes" with a backup U2F key.