I worked for a company running a certain F5 VPN and their 2FA didn't have a Linux client. I managed to make it work by running an ancient Firefox which still could run old style extensions -- and ran it as root. Very secure.
MFC devices break all the time.
And so forth.