Re: 2fa choices
You can get a Paypal Security Key, which is a hardware VIP device to generate access codes, but these don't seem to be available in the UK.
Someone has created a free alternative, which means you can use any OTP app: "python-vipaccess is a free and open source software (FOSS) implementation of Symantec's VIP Access client. It is able to generate OATH URIs and their corresponding QR codes so any TOTP-generating application can be used as a VIP OTP token." You can find it on Github.