One of the contexts is login to the laptop , would be pretty challenging to facilitate on device ;)

Sadly, biometric authentication as 2fa is not sufficient for that.