Interesting to see that passkeys make use of CBOR. When I looked at binary JSONs several years ago, Smile was one of my favorites, but CBOR was decent too.