The exception I make is that I use Google Authenticator for my work 2FA (via Okta). I also have a yubikey set up but our VPN application doesn't work with it.