I've seen public facing things that offered hardware 2fa but blocked non yubikey devices. I do have yubikeys for those cases but prefer to use the onlykey because of the password manager function as well.