Google Advanced Protection Program authentication method

Hi, I recently got a msg from google that suggests enabling Google Advanced Protection Program for my google accounts (https://landing.google.com/advancedprotection).

I learned the matter a bit and found out that the main difference between the standard google account 2fa security ( username + password + 2fa via google prompt app), is the use of security key in the advance program instead of Google prompt app as the second authentication method.

I secure my google account with 2fa using the Phone prompt method (getting a prompt on my google app to OK the login). As I see it, this method is more secure than physical security key suggested by the program because it required me not only know my google password but also be with my phone (physical element) + unlock my phone with passcode or fingerprint (something I know + something I have) + clicking the Yes prompt on my google app.

In the Program, all of my adversaries need to get access to is my google password + my physical security key (that does not have another pass or code to use).

I personally think that taking my physical key from my backpack or work desk is easier than stealing my phone and bypassing all the phone locking mechanisms.

Am I missing something?