I'm trying to say that all hardware tokens are not created equally. A hardware RSA TOTP-esque fob offers no phishing protection where as a FIDO key does. Its unfortunate this site doesn't distinguish between those two cases.