Comment by sam_lowry_

There is no way to generate your own software key pair as easily as one can do with ssh-keygen.

The whole spec is designed with hardware tokens in mind, software tokens are not mentioned anywhere, and WebAuthn spec designers wave their hands when asked about software tokens.