How Apple's (now unanimously accepted by fido2) proposal to improve Webauthn actually breaks its important security properties.