I was surprised when switching to U2F authentication that I can only register one key on my AWS root account. If I lose that one single hardware key I'm in for a world of pain. Why half-ass such an important feature. Things like this make me look for alternative providers that take security more seriously.