I would certainly hope not, depending on the implementation it would be placing critical keys in the hands of an unknown/untrustworthy third party. The alternat

I would certainly hope not, depending on the implementation it would be placing critical keys in the hands of an unknown/untrustworthy third party. The alternative is to manage the key infrastructure as a company which brings its own overheads, so the most obvious implementation goes back to WebAuthn.