Why not just use U2F or certificates on crypto-tokens?
Note that for eIDAS 1, a Czechia e-identity provider uses U2F tokens.
alt Hacker News
Note that for eIDAS 1, a Czechia e-identity provider uses U2F tokens.