> My impression is, all browsers are holding back on everything HTML-native and JavaScript-free.

Somewhat tangentially, the official response to a request for WebAuthn without JavaScript[1] was that the big websites don’t care and thus neither do the browsers.

[1] https://github.com/w3c/webauthn/issues/1255