agreed, this only works if there are not "workarounds" or non-trivial ways to recover your account if you lose your yubikey.