The company I work for has around 250k employees. I’m sure software RSA is going to be drastically less expensive than yubikey.

The people making the policies don’t care at all. They are just dotting is and crossing ts.