I personally disable it too and use passkeys to login into most of my websites as explained here: Password, 2fa, and their backups management, need critique! - #19 by kissu
But the rest of my opsec probably needs to be taken into account too.
Not sure if the most secure but I also don’t mind not having the feature, not a big hindrance haha. ![]()