“The following list of passkey providers have not implemented User Verification in a spec-compliant manner.”