I had low expectations for the new Apple TV, and this is one of the signs (combined with my theory that "apps" are not what people want on their TV anyway). Chromecast already did authentication right; how are they still so far behind? (Also, just check out that onscreen keyboard layout. Absolutely user-hostile, and vastly worse than the old Apple TV.)
ssh+2FA to all your machines, anywhere, without opening firewall ports.