Biometrics are not needed, however device support is not 100%. If the user is not running a model OS they could still be supported by using what is known as a

Biometrics are not needed, however device support is not 100%. If the user is not running a model OS they could still be supported by using what is known as a security key (yubico) etc. The Passwordless API can also help with out of band authentication (using a iOS device to sign in on unsupported old laptop)