Comment by zaptheimpaler

These guys are so dedicated to protecting us from ourselves that they won’t provide any mechanism to export passkeys and port them between devices because it might be used for phishing. It’s just fucking annoying and presumptuous. No im not going to fall for phishing, i need to have some escape hatch to get the data.

Attestation lock down is also ALREADY a real thing. Microsoft sites (and others) frequently require you to use their bespoke 2FA app instead of using the open TOTP protocol. They will do the same thing when it comes to deciding which devices and software are allowed to login, and everything outside the corporate slop safety bubble will be denied.