The version of OpenSSH included with macOS does not support FIDO-related features and instead uses the relevant parameters to access the macOS Keychain, so I always have to install OpenSSH from nixpkgs myself.

It’s a new feature! In Tahoe & Golden Gate at the very least FIDO is supported by the SSH agent