when are they blocking the ability to update firmware?
Pretty sure you can update the Yubikey firmware.
And anywho yubikey is generally being recommended here so I wouldnt go against it.
Edit: it seems it is true. However historically yubikey replaces your key if a vulnerability is discovered And I understand their reasoning to not allow the firmware to be accessible as long as they can still mitigate vulnerabilities in other ways.