Any Yubikey 5-series (non-FIPS) is good. U2F and GPG cover the majority of use cases. Other subsystems (TOTP, PIV, etc) are available for less common use cases.