Characterising FIDO2 as a single factor is over simplifying it. You have to convince the FIDO2 token to prove it's presence. Yes, for many, all it takes is pl

Characterising FIDO2 as a single factor is over simplifying it. You have to convince the FIDO2 token to prove it's presence. Yes, for many, all it takes is plugging then into a USB socket. And yes that's just one factor - having the token. But some tokens ones require a fingerprint. That's two factors - having the token, and a fingerprint it recognises. But move to a device like a phone and the games changes. It could just be the presence of the phone. More likely it will probably insist the phone is unlocked. But the app could demand a fingerprint, or face recognition, or a PIN, or be in a particular location, or see other devices it knows, or some combination.