For sure, the hard part isn't building it, it's getting people to actually use it. The amount of effort involved of actually acquiring and transporting a hardware security key is well beyond what most "normal" people are willing to do.
Plus, reading your example in a different comment, it's completely jarring to someone who isn't used to reading things in that format.
