Webauthn can only be used as 2fa if sequencing is enabled (reason is https://github.com/canonical/identity-platform-login-ui/blob/main/pkg/kratos/service.go#L1132)