pull down to refresh

It should be usable for things beyond PGP, like FIDO/WebAuthn?

They admitted as much later in the post. You are correct.