That's because WebAuthn in general is a poor match to most lower-stakes uses of passwords. Not everything is a bank account. Many things are appropriately authe

That's because WebAuthn in general is a poor match to most lower-stakes uses of passwords. Not everything is a bank account. Many things are appropriately authenticated using "just" a password manager. WebAuthn refuses to acknowledge that, because it's a standard born of corporate security officers serving their own ends. It's still appropriate for some things an average human or techie human does, but not everything, and its promoters need to stop acting like it is the only game in town.