I was super happy to see that option for sudo, and it worked great. Until MacOS reverted it. Not sure if I did an update or what, but the change was undone.
It is reset every time MacOS updates. Quite annoying but you can just set it again.
I have a shell script that runs at every boot and replaces the config change if it's missing.
Now only if I could somehow use the Secure Enclave on my Apple Watch to store webauthn and other u2f authentications, so the device I have on me most of the time could act like yubikey