It will be like with the current Nitrokeys, where smart card, password manager and passwordless login are PIN protected and 2FA functions are not protected (but can be PIN-protected optionally to realize 3FA).
Fill in the blank.