Relevant, HEADS firmware: https://github.com/osresearch/heads

Definitely worth reading the Wiki: https://osresearch.net/

Can be run on a variety of laptops, including a ThinkPad X230. Ships by default on Librem laptops. Uses the second-to-last approach described by the article (TOTP-based).