Reports about the death of the hardware two-factor authentication have been very premature.