It's still popular in certain corporate settings, where you're dealing with workflows that don't have easy support for FIDO2. For example, certain embedded browsers for logging in to VPNs.