I've been doing this with a Yubikey Nano (much more practical form factor on a laptop) since Ubuntu 22 😇
True, but Nano lacks touch confirmation - malware can auth silently while it's plugged in. 5C NFC enforces "something you do" for every operation. Bio Series adds fingerprint for even stronger "something you are" without PIN fatigue.