With a use of cross-platform authenticators this should not be much of a problem. You use a YubiKey to log into your site and in the admin panel there would be a button that enrolls your platform authenticator too. I think I saw something like this in the spec’s GitHub issues, can’t remember where exactly.