Windows 10 can act as a FIDO2 authenticator like a Yubikey, but needs a TPM to do so. They want this to be something that actually happens for the average user in windows 11.