This is a cop out. Everyone is at risk of losing their Yubikey, neurodiverse individuals aren't alone in this. The answer to "MFA is too hard" is "use a Yubikey." I have shipped them to people in other nations that didn't have a cellphone and couldn't receive a phone call for MFA. It works.

The organization is responsible for the security of the platform. A simple password incurs too much risk, MFA and conditional access policies are required. The user is responsible for complying with access policies if they want access. Instead of using MFA as a "band-aid" for the key issue, advancement in computing that allows poor passwords to be cracked, users who don't comply could simply be denied access. Like people who choose a phone call for MFA instead of an app push when they have a smart phone, and can't get in when there is a phone network outage.