Keep up the fight. I've tried this with banks, who are keen on forcing Android/iPhone apps on everyone. Should hopefully be easier to get a public entity to provide non-proprietary 2fa implementations.
Authentication has been a solved problem for decades but no bank is going to ask the general public to use their SSH keys.