FIDO2 doesn't solve the first website contact trust problem - only the HTTPS certificate does that.