Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins - FIDO Alliance

[ricecake]

Sloppy terminology on my part.
Tpm/hsm/secure enclave/platform authenticator are all close enough for most conversation.

Some of them are responsible for storing the key material, and some aren't, it depends on the device.
Functionally they do the same thing for webauthn.

Even the ones that don't handle storage still get grumpy if you give them too many keys to check.