Yes, because financial institutions are responsible for losses incurred via account takeover.

And yet no financial institution in Canada supports webauthn hardware tokens - instead choosing to bake their own scheme within their app or use SMS.

And yet they are still out here offering voiceprint authentication

JP Morgan Chase does this, regrettably.