They're great when you don't own a phone - when you can't use random 2FA "Apps".

As many USB-security keys can be used passkeys.

> when you can't use random 2FA "Apps".

You don't need a phone to do 2FA :

https://github.com/pcarrier/gauth

Not all 2FA is TOTP or a similarly-open scheme.