Privacy problems are not policy problems, businesses are choosing to invasively collect data in order to pad their coffers. This is not welcome and just because you try to hide this fact in obfuscated policy language it is not ok.
I have used my Yubikey to do FIDO2 auth on Linux Mint with Chromium and Firefox. I have tried M365, Twitter and Facebook but any website that supports FIDO2 should work.
Yes they are available on iOS.