Clever, and more practical than two-factor for a lot of situations without sacrificing security. Doesn't necessarily preclude using SSH key exchange on your trusted (encrypted hard disk) personal computer, either. If you're REALLY paranoid, you could use OTPs there as well -- you can't keylog a piece of paper in your wallet...