zlacker

> Many services I use that do support WebAuthN allow either variant

The problem with "many" is that unless it's 100% of the ones someone cares about, the solution can't really solve the problem, adding an additional pain in the ass and making it easier to just stick with passwords.

Sometimes, a lack of choices is a feature. (Compare e.g.: IPSec vs. Wireguard).

>>tgsovl+(OP)
How so? You can use the exact same password manager for both.

> Sometimes, a lack of choices is a feature. (Compare e.g.: IPSec vs. Wireguard).

HTTP vs. HTTPS seems like a more appropriate comparison in this context. Passwords and OTPs are really, really phishable.