[Fazel94]

Is GPG Auth the answer?

It is tied to the site keys and not the address nor even the CAs.

It forces you to check and think before doing your thing.

And It is easier to use than 2FA, since it is one factor, open your key one time, the key auths you as long as you want.