We don't recommend anything specific for 2FA. We do support security keys, as you say, so if you have one, you are welcome to use it. But we also support 2FA via TOTP for all of those who don't have a security key, so getting one is certainly not required :)