Easy GUI setup of passwordless or 2FA login into Mint via physical security key

[ReaperX]

Setting up Linux Mint with passwordless or 2FA login through a physical security key such as a yubikey or nitrokey currently requires tedious and risky command line work, more so if the system partition is encrypted with LUKS. There is no "official" instruction set for current versions of Linux Mint that I can find.

It would be wonderful if Mint offered setup of passwordless or 2FA login through a physical security key via an official GUI applet Security Key that is part of Administration. Security Key would offer a toggle: passwordless or 2FA, and a button that either says Activate, if the system has not been set up yet, or Deactivate. The applet's Activate function should offer to set up one or several (for backup purposes) security keys, and also work if the system partition is LUKS encrypted.