Thanks for the question. we use are using the fido2 standard to ensure that would be impossible