The following pages link to 12C/ NEVER say WebAuthN is Hardware protected unless you check attestations!: