[slowbdotro]

Technically yes, but from memory, your U2F public key would be leaked. Thus depending on your threat model you may still want to rotate U2F keys.

[quickcheck]

I thought ‘public’ means it can be shared widely without there being a risk to the private key. What threat model would consider it a risk to have a public key exposed?

[password4321]

Identity/privacy: de-anonymizing accounts reusing the same public key.

[lazka]

U2F generates a new keypair for each origin. Public keys are not re-used.