Especially that nowadays password authentication may fade away soon.

Windows already supports password-less authentication quite well. It's just a matter of time until there are good solutions for Linux too.

I have already some systems set up in a way that they ask for a TOTP when doing username/password login via SSH: https://github.com/google/google-authenticator-libpam