Well, we already know that U2F comes "built-in" in some laptops (which I think defeats the purpose of U2F, but that's another issue). And phones makers are sta

Well, we already know that U2F comes "built-in" in some laptops (which I think defeats the purpose of U2F, but that's another issue). And phones makers are starting to adopt "hardware security modules" (just Pixel 2 so far, not sure about the new Samsung ones) and Android 9 is giving app developers access to them via API. So I guess in theory one could turn the phone into an actual "U2F security key," for all intents and purposes?