That's odd, because I can sign into (on-prem) Confluence with my Yubikey (5 NFC) as the MFA via Firefox. I get a little Windows "tap your key" prompt and everything.
However when I look at the JS code in appleid.apple.com there does seem to be code for U2F code surprisingly.