For info, WebAuthn is the "right" API to implement.
U2F is being actively deprecated - https://groups.google.com/a/chromium.org/g/blink-dev/c/xHC3AtU_65A - and warnings are being shown to users now - https://gitlab.com/gitlab-org/gitlab/-/issues/346662