In fact, Google and Apple have recently started synchronizing Passkeys to the user‘s cloud account, which effectively undoes any specific device binding.
As a Relying Party, you can’t know what authentication method will be used for either enrolling a new device, or on the new device itself.
As a Relying Party, you can’t know what authentication method will be used for either enrolling a new device, or on the new device itself.