Allow the use of physical tokens like a UBI Key for MFA when authenticating to the site. Using Authy or something else sounds great but that requires a cell phone and some users do not want to use their personal device and are not compensated for it. Furthermore, Authy has eliminated their desktop app.