Depends on the browser apparently? Only on Webkit is what it says, it’s not clear if the site doesn’t support FF, or if FF is secure.

WebKit passes the request to a separate system process.

On Mac, Firefox and Chrome, which don't use WebKit, handle WebAuthn themselves.