I&#x27;ve been disappointed in Yubico since I saw their advisory downplaying the bug in the original OpenPGP support which meant it didn&#x27;t require a PIN to perform crypto operations (and of course, this can be done over the NFC interface too): <a href="https:&#x2F;&#x2F;developers.yubico.com&#x2F;ykneo-openpgp&#x2F;SecurityAdvisory%202015-04-14.html" rel="nofollow">https:&#x2F;&#x2F;developers.yubico.com&#x2F;ykneo-openpgp&#x2F;SecurityAdvisory...</a>