I was troubled from the very beginning by the fact that my U2F security fob acts as a keyboard and theoretically is able to press any key when no one is looking. Sometimes I accidentally touch it and then screen goes mad because of all those keystrokes. It seems to me a pretty bad design choice.

I was reading article by YubiCo with justifications and not much of it makes sense. It says that it’s because of drivers, but following the same logic such a security key can be just a read-only flash drive with some added extra sauce on top for key management without any keyboard jazz.

So why keyboard emulation? Are there any alternative fobs taking a less spooky approach?