D'mon on Nostr: Yubikey perhaps is a partial answer, But can be lost. Biometric is not resistant ...

Yubikey perhaps is a partial answer,
But can be lost.
Biometric is not resistant against a wrench.

I suspect the answer is somewhere In multilayered security
It is ok to have a fingerprint to enter /home/~

And would require a password to access a project on veracrypt volume

And yubikey and a pass to access keepass file on veracrypt module.

And all of that will fail if a keyboard is compromised and leaking data

🤷‍♂️