If a single large vendor has ~30% market share and automatically installs locks for people with screws accessible from the outside surely it's a security issue

If a single large vendor has ~30% market share and automatically installs locks for people with screws accessible from the outside surely it's a security issue of _some_ type for services that rely on those secure locks being installed properly. I agree it's google's problem and not FIDOs but it still affects the applied security of their devices. Any security solution is only as strong as the weakest link and needs to be evaluated on an end-to-end basis. A secure lock with properly installed screws is surely useless if installed on a screen door, or a window is habitually left open near the secure lock door, or keys to the secure lock with the address and PIN number written on them left in public places.