Passkeys and hardware attestation are also good as they require a fingerprint or face and bare metal hardware instead of a VM, but Spez also wants to introduce things like the Worldcoin Orb and IDs as well which are too invasive IMO.