Technically, it's a breeze. When you issue a cert or a cookie, you can easily put in a time-limit on it.
Logging in every 30 days or so is pretty easy, especially if you allow Edge, Chrome, or MS Password Manager to auto-fill your password.
What i am talking about is containerized.
I would grumble a bit at that but I would get used to it. When my credit union dropped that call-with-a-number I went in to the office and explained to them that I was annoyed that they were making my account easier to hack. I think some others had the same complaint and the two factor numbers got reinstated with two more digits.