Nitrokey would probably be my choice as both the hardware and software are open source( in fact you could probably build your own if you wanted to). I don’t trust yubikey as the firmware that runs on them is closed source so you just don’t know of it’s actually secure.
Sure they should be allowing it, but anyone who cares about digital privacy and freedom that’s still using apple devices kinda deserves what they get at this point.