Definitely. Costs extra, has an extra step to set up, and has an extra step to use, but is so much more secure.

That said, biometrics are better than “1234”. I have no issues with people who have bad password hygiene moving to biometrics, which at least add an extra barrier for account compromise.

But for the rest of us, physical security tokens are definitely the way to go.