Can confirm I use this and it's super convenient to have json payloads open right up in a useful editor
Thankfully, the alert was sent to enough people it was caught by someone else, and the key was destroyed before someone outside could have fun with it.
I'm traveling. My phone and laptop are lost or stolen. I am now unable to log in to anything?
There are recovery mechanisms that you can set up ahead of time (a series of recovery codes for example), but for the most part I would agree with your premise: you will have a very hard time accessing your accounts if you ever lose your primary devices. For me the security benefit is worth the inconvenience.