JS webapps have one key feature in this respect, there's no possibility for banks to force particular OS/HW on you via attestation.

Passkeys come with device attestation.