Every one is quick to jump on Yubikey! I agree that the 2FA option is the strongest security posture you could elect for your Facebook account. But Yubikey 5 is not fully open sourced. There is a new kickstarter campaign from SoloKeys that is bringing a fully open sourced FIDO2 ready security key. Worth checking out