Enhancement Proposal
Since the release of kratos v1.2.0, it looks like kratos supports passkeys as a config option. We should use that to support passwordless webauthn authn (for 1fa) and we should set passwordless=false for webauthn, in order allow webauthn as a 2fa.