Apple officially allows and supports VPN apps since tvOS 17 and there are many VPN apps available for Apple TV now.

Not sure I understand the question. A key can be used on Web as well as on the mobile apps now, instead of TOTP (which however cannot be yet disabled). It is generally advised to have a multiple key pair, incase one is lost / defect.