+1 vote for the suggestion to support U2F in the IPS core. It is supported in all modern browsers now.
https://caniuse.com/#search=U2F
Also, U2F is widely adopted and supported by companies and governments. It's already implemented in Amazon, Google, Facebook, Twitter, Microsoft, GitHub, GitLab, Dropbox, and many other internet giants.
U2F is much more convenient to use compared to all currently supported 2FA methods.