The QR code sign-in is fantastic, however, it should also allow users to sign in outside portable devices. For example, using a logged in session within the browser could improve the logging workflow experience for users with degoogled devices as the user can then only have a security key setup in their account and avoid altogether less secure forms of 2FA such as TOTP. At the moment, degoogled devices pretty much must have TOTP enabled, which is not ideal for those seeking maximum security within a degoogled ecosystem.