I strongly agree with this suggestion. I'm a subscriber to Firefox relay premium, that I use for a variety of online services where registration with an e-mail is required. If someone somehow got access to my Mozilla/Firefox account, that would be a big breach of my privacy, and would probably make me more vulnerable to scam or other attacks. I already activated two-factor authentication on my mozilla/firefox account, but the only available method for that is based on the one-time password (OTP) system, which is less secure than FIDO2 and security keys. I think Mozilla shouldn't wait for security incidents to happen to implement FIDO2/Security keys on Firefox/Mozilla accounts.