The thing with yubikeys is that, I can change them. I can't change my face or fingerprints. Use that for authentication reduces control over privacy and enables tracking across the web.
Was there an audit but independent privacy focused organization done of your claims? Till then any privacy claims are just claims. New day, new privacy friendly face recognition that will website big corporations to do tracking in the name of "kyc" and security