And I’d though everyone else also kept their gpg and ssh keys on Yubikeys[1].

[1]: https://github.com/drduh/YubiKey-Guide

Or in the Secure Enclave on Macs.

https://github.com/maxgoedjen/secretive