While there are a lot of smart people at the EFF, it's an organization primarily focused at defending legal rights. While we definitely want to consider the legal rights of an individual while coming up with a passwordless protocol, I put this work to technologists, not lawyers, first.