Why does it need to support u2f? Would be nice if it did but from a security point of view,it does support two factor authentication(TOTP).

If you're concerned about the authenticator app being compromised then a dedicated phone or hardware token device can be configured.

As I said,u2f has better security but at least financially speaking,time based OTP has a lower barrier of entry while being superior in it's security to most non-u2f alternates (phone call,sms,etc...).

I don't think lack of u2f alone disqualifies it from being considered as having top tier authentication.