1) Trusted Platform Module
I use Ubuntu Linux setup by @tuxedocomputers. They have disabled Secure Boot in WEBFAI by deafult. I do not know why. Apparently this also means it did not install the required files for TPM. I also wonder if this would work at all given with the Web Authentication API as I use LibreWolf.
TPM is not a solution now.
2) Security Keys?
I don't own a security key. I'm not sure I want one. Hardware can/will fail so I need at least 2. Not an option now.
Passkeys?