Exactly. Same principle of passkeys, Yubikeys and FIDO2. Much harder to phish because the domains have to match.

I’m impressed with their feature to add the URL for next time, after manually filling on an unmatched URI. Hairs raised on neck clicking confirm though.