What is the most secure 2FA method?

[jonah (Jonah Aragon)]

@CarefulMouse

if the passkey is behind a PIN, is that 2FA?

In the case of Yubikey (which are guaranteed to never be cloned) I would agree that it is 2FA, if the PIN is required for every use.

Software passkeys are in a decrypted state or backed up in various ways too often to rely on this.