Comment by tennysont

If you want to see an example of pro-user behavior, read the github thread where a FIDO developer asked keepassxc to disallow exports of passkeys[1] or to reprompt for the db password if the website requests it[2]. The conversation was roughly:

  > keepassxc: no
  > FIDO devs: but the spec
  > keepassxc: that part of the spec is anti-user
  > FIDO devs: do it or we might blacklist your app
  > keepassxc: can't we just impersonate another password manager? also isn't bitwarden already doing this?
  > FIDO devs: "Someone else is doing bad things too" isn't the greatest argument...
  > FIDO devs: maybe we could hop on a phone call?

[1] https://github.com/keepassxreboot/keepassxc/issues/10407

[2] https://github.com/keepassxreboot/keepassxc/issues/10406