Is it not possible to just implement webauthn in software (e.g. as a browser extension, or like the SSH agent)? While that's not quite as secure as a hardware t

Is it not possible to just implement webauthn in software (e.g. as a browser extension, or like the SSH agent)? While that's not quite as secure as a hardware token, it's still better than using a password.