Just wanted to add something different from the other posts, definately not recommending it.
That being said, it is a hardware key. You can set it up as a Fido2 key, making it as secure as any of the other options here, it is not biometrics.
Like I mentioned, you have to be a little crazy to go that route
Have you considered using https://github.com/imranr98/obtainium You give it the repository of the app and it will handle checking for new versions and updating them