TOTP keys, backed up physically (as in, written down and stored somewhere safe), are probably a good way to balance the failure mode with the security.