(1) is already true today. There is no way for services to enforce whether a passkey is stored in software or hardware.

  (2) I understand you don't like the user experience

I actually kinda like the enter-a-pin flow, it makes me feel a lot safer about letting someone hold my phone. I just hate the lock-in it adds