> WebAuthn lets a site work with Security Keys and that makes such a loss basically harmless unlike for password hashes.

Yes, because all of those teenage fanfiction readers are going to have yubikeys.