> I do worry modern Oauth2/MFA is going to kill the free OS.

As long as you can run a modern browser, how so? FIDO2 is pretty well supported everywhere these days, though of course you don't get a platform authenticator like macOS keychain or Windows Hello.