Got here after finding myself stuck in that exact loop (which initially I assumed was a phishing attempt from a webview ad link I thought I accidentally clicked).

Looks like some users who have never used or heard of Yubikey report being locked out and stuck in the same loop.