If it isn't backed up it doesn't exist.

Corollary (likely unpopular I'd hazard) - hardware token implementations that I can't back up to paper don't exist as far as I'm concerned.

My policy is to enroll multiple WebAuthn keys and treat the second, third etc. key as the backup.