can be solved with a hybrid model that degrades when the central service is down. No?

Well they provide that if you want. they have both a OTP dongle, a OTP loud speaker and one that uses FIDO U2F (though you need to pay for that one).

https://www.mitid.dk/en-gb/get-started-with-mitid/how-to-use...