These are very damning. Pretty straightforward about removing all software freedoms in favour of some sense of security. It really is already happening:

> I have a sneaky suspicion that some of our failures with various RP's is because they are only accepting certain authenticator GUIDs.

This comment from the KeepassXC maintainer makes me feel like the whole spec is already completely flawed if such a situation is even possible.