well. I lost my 2FA dongle once (left it on a different continent). Which I used to secure my domain name on which I received mail.

suddenly I was happy that low level support staff could remove it. (I needed to scan my passport and photo. This was way before modern image generation.)