Looks like this happened:

OpenSSH server has had built-in support for WebAuthn keys since 8.2.

According to Framework support, there are no supported models as of yet.

I have a Framework 13 AMD running Linux Mint. It works great and I love it. Modular IO ports are super nifty.

Here are the downsides as I see them:

1. Price
2. No touch screen
3. No wifi 7

I expect 2&3 will come in the future and I can upgrade! The fact that I can upgrade rather than throw it away in the future offsets 1.

What type of key do you have. Yubikey 5 supports multiple protocols including some you can use with SSH:

• Multi-protocol: YubiKey 5 Series is the most versatile security key supporting multiple authentication protocols including FIDO2/WebAuthn (hardware bound passkey), FIDO U2F, Yubico OTP, OATH-TOTP, OATH-HOTP, Smart card (PIV) and OpenPGP.

SSH would need to implement webauthn to support FIDO.

Secure can also mean more resilient. The infosec C-I-A triangle has three legs. Confidentiality, Integrity and Availability. Immutable distros are more resilient and thus offer better availability in the face of attacks or accidents.