[tunesmith]

But that's the whole point - yubikey with fingerprint, or any combination of things that exclude "something you know", opens you up to a whole set of vulnerabilities. Like "legal snooping"; that can't be done if you're protected with "something you know".

[cxmcc]

you can choose to use something you know with passkeys if preventing legal snooping is your priority.