I imagined a yubikey type of solution with keychain but is fingerprint, biometric?
I feel 256 chars inc, lower/uppercase punctuation and numbers generated with 1658bit entropy that common password managers can create would be fairly secure and no need for subscribe/connect to icloud servers.