If that's the direction of use cases for webauthn then I am not sure how much weight I will still be able to give to it as secure auth tech.