You raise some valid points, but I don't think that Microsoft Authenticator implements FIDO/U2F/Webauthn. My point was that the number matching implemented by M

You raise some valid points, but I don't think that Microsoft Authenticator implements FIDO/U2F/Webauthn. My point was that the number matching implemented by Microsoft Authenticator is no safer than TOTP.