They made it too secure. Classic overengineering. The hardware aspect should have been optional from the start. It needed two things: browser free credential m

They made it too secure. Classic overengineering. The hardware aspect should have been optional from the start. It needed two things: browser free credential management that didn't need special hardware and a way to move around creds between devices effortlessly. The security improvements are great but outside of people who care a lot about this (similar to fido2) it makes things more difficult without making other things less difficult.