Sadly, WebAuthn is also becoming a victim in the same way (at least on iOS). The expectation is that WebAuthn private keys are stored in the secure enclave, wh

Sadly, WebAuthn is also becoming a victim in the same way (at least on iOS). The expectation is that WebAuthn private keys are stored in the secure enclave, which would be a comparable security guarantee to YubiKeys and other hardware devices. "Passkeys" are now forcibly synced via iCloud, you can't use WebAuthn on iOS without enabling iCloud Keychain.