There is a crucial difference here. With FIDO U2F I am not limited to Yubico&#x27;s offerings; there are other vendors. FIDO U2F devices can be manufactured by any company (and are).<p>I agree that the ideal situation would be a device that is completely under the control of the user, but compared to IOS or Android, a hardware token that only does what it is supposed to do (in the case of the U2F tokens; register and sign authentication requests), and cannot be modified by the manufacturer after sale is very much preferable.