Oh, for sure that‘s true (with respect to telling employees “use these devices or you’re fired”). But I thought we were talking about the corporate relationship

Oh, for sure that‘s true (with respect to telling employees “use these devices or you’re fired”). But I thought we were talking about the corporate relationship with society and the company’s users/customers. In that broader context, I’m surprised that so many folks in this thread are arguing, essentially, that companies have a strong incentive to push (potentially needless, or costly from a privacy-perspective[1]) features on their users. Historically, my feeling—-and I think that of many in the security industry—-was that the market does not reward pushing security, especially not security that customers can’t see; as a result, there’s some chunk of security theater, but real security features are often under-rewarded. shrug [1] To be clear, I disagree that most of these things have a severe privacy cost, hence my point that FIDO allows strong pseudonymity.