I run a tech SaaS, and from my experience, WebAuthn can be confusing even for reasonably technical users. Some users don't pay attention if their WebAuthn credentials are tied to a cloud account, to a specific machine, to a specific browser, or to a specific security key. Six months later they try to sign in, get an error message, and have no clue.