Two Factor Authentication
The login does negotiate a TLS session, so a MITM attack shouldn’t be a problem (assuming the certificate infrastructure used is good.)
The authentication is an open standard, you can run the program on a spare computer, in a VM, or if needed in your main comp.
If you are good at math you can actually generate the authentication code by hand, though doing it in 30 seconds is impossible.
I’d be happy to pay for a keyring type authenticator if it was an option. Not everyone has or wants a smart phone.
The standard price for the key fob tokens is about $25 each from RSA (minimum order 10), dropping as order size increases. That’s ignoring the licensing costs for the server side software, which are considerable.