Yes. This attack would not have worked if FIDO2 (or the software emulation Passkey) had been used.