we recommend using hardware security tokens, via either webauthn or the older u2f, to secure your high-value accounts

your high-value accounts are: email, personal infrastructure, domain registration... anything that gives an attacker power over other things. email is the most important for almost everyone, since it can be used to reset everything else