It was relatively easy to setup a yubikey bio fingerprint device in arch with pam-u2f. I just kinda followed the wiki here: https://wiki.archlinux.org/title/Universal_2nd_Factor
It wasn't strictly plug and play, but it only took like 20 minutes of fiddling.