ah, I recall that after writing that text I implemented a proof of concept for passwordless login on Webauthn/passkeys.io which has worked well for me, I haven’t tested with more users so I don’t know how well it’ll be received.
I guess most mainstream browsers will follow that path.