I'm super curious how this will ultimately work. As noted in another thread, secure enclaves aren't secure if they can be copied. Such that, if this is moving the passkey by copying it, I'm not at all clear on how that stays secure?
replies(4):
They can be stored in them, but also in software; even when stored in hardware, they can be marked as extractable to some trusted party (a companion device with the same root of trust, a trusted cloud sync service, a supply chain attacker etc.)
If you are worried about state level activity, have it stored in a single place that can be compelled by law to disclose it and that is off the table for you.
Which, sure, you can argue that there are still hardware tokens for people. But that is itself a signal, no?