Passkey as (mandatory) 2FA

Yes, this is on our todo list. This would be a usability improvement, since browsers now bundle passkeys and security keys together. And there’s no security downside here, under the hood a passkey is the same as a security key, the only difference is that a passkey can be used for login without a password.