What part of webauthn can a computer not do?

I understand if you say bots are currently not programmed to, but is that why this will temporarily work or is there something more fundamental?