Great summary. Small comment on FIDO2 tools - Token2 now actively helps to develop open source vendor-agnostic FIDO2 tools (check keyroost for desktops and librekeycompanion for mobiles) - so you have one (or two) fully open source tool(s) to manage any FIDO2 key