Nitrokey would probably be my choice as both the hardware and software are open source( in fact you could probably build your own if you wanted to). I don’t trust yubikey as the firmware that runs on them is closed source so you just don’t know of it’s actually secure.
People have already proven they will put up with about anything Microsoft throws at them, so they were never going to switch anyway.
Also you still can’t uninstall the bootloader under windows.😆
Sure they should be allowing it, but anyone who cares about digital privacy and freedom that’s still using apple devices kinda deserves what they get at this point.