> malware can't trigger a physical presence button push It kinda can, it just needs to trigger a dialog the user thinks looks legit. Or easier, just stay resi

> malware can't trigger a physical presence button push It kinda can, it just needs to trigger a dialog the user thinks looks legit. Or easier, just stay resident until the next time the user pushes the button. Don't get me wrong, U2F has benefits, but it's not invulnerable to malware designed for it. You want real system level protections to back it up and most users aren't running on operating systems that can really cash the check you're trying to write with that threat model.