such a tragic insane pity that fido2 keys can't be used on the web for this purpose.
webauthn fits a different use, of the browser managing keys for the user, outside the page & the server's view.
and webusb explicitly blacklists fido2 keys &c.
madness that our security devices only use is to identity us securely (and in a way where afaik we have no ability to clone identities, &c, by design. scant, limited powers over these devices), and not to protect our content.