Please advise us why "PASSKEY" cannot be setup for SECURITY reason?
OR advise what similar feature is available besides eMails, phone (sms, ...).
PASSKEY. It is the most secure way (in my and others like Microsoft, Android ... opinion) for 2FA.
Your current way of security is old fashioned, clumsy to use. E. G. we keep providing assurance that "keep me loggedin", but it just doesn't, next time you log in you have to start again, NOT talking about the fact that , in my case, I have to repeat the process 2-3 times, no matter I put in the REQUESTED info. I, personally, don't carry smartphone, but your current verification system DOESN'T allow me to loggin without PHONE or keep me logged in without new loggin hassle,