> One, which the Europeans use, hardware-locks the token.

I'm surprised anyone considers this viable.

It would limit access to those sites to a limited set of acceptable devices and operating systems.

I couldn't use my laptop, desktop, or a jailbroken phone.