I wanted to remind once again that hardware keys are immune to fishing because they check website domain unlike humans.