TOTP authentication with free software

• WebAuthn is nice in principal, but has the serious drawback of being tied to a device. Multi-device WebAuthn (meaning you register one device & can authenticate on a different device) is in the works, or there are thoughts about it, but no real solution.
• That realization led to yet another development called Passkeys, which are authentication tokens that can be synced between devices (e.g. Google Chrome on your desktop & mobile devices will all use the same tokens). The huge drawback is that in order for it to work the actual authentication information isn't only stored on your devices but on with a third party (with Google Chrome: on Google's servers), meaning you have to trust those providers with your credentials.

What my point is in all of that is how it'll mesh with the vast majority of the population which simply is neither very tech-savvy nor security-conscious and oftentimes lazy. When I argued that the day will "never come", this is what I had in mind I fear that WebAuthn will never really gain traction with the general public because it's simply way too much hassle to implement compared to TOTP 2FA (the general public often enough doesn't even want to use that).

And for Passkeys my fear is that the general public will simply chose the most convenient implementation, which means that the vast majority of them will have their passkeys stored with Apple or Google, depending on the eco system they're part of. Furthermore if Chrome is the sync mechanism of choice in the Google world I question how other apps will gain access to synced Passkeys — on mobile via the embedded Chrome thingy or Play services or such, and on desktop? I have doubts.

Now us more tech-savvy people will probably like WebAuthn for its properties, rejoice about Passkeys & set up our own storage and sync solution. For the whole world as such I'm not optimistic that this shift is a net positive.