We haven't audited this personally but I'm lsoking forward to doing so. This looks awesome -- my only problem is that it doesn't solve U2F/WebAuthn on the phone itself, which is still a lot more complicated on iOS than it is on Android (even though overall, I think iOS is a better platform than Android, at least from a security perspective).