I believe Gitlab has supported hardware keys for years now. At least Gitlab.com, not sure about the self hosted one.
I can only assume that this tactic is usually an attempt to maybe get your phone number, depending on which phone-based method you choose. Which is especially weird for ProtonMail.