Pass the Passkey: Be honest — did passwordless implementation neglect the one thing that matters most in MFA?

Passwordless authentication has become more common due to convenience and speed, but its true security is often compromised if relying parties fail to validate the User Verified flag.

• Option 1: We're skipping this step too soon
• Option 2: It's not a major oversight for now