“cite please”… or more to the point, where did you find that? I have been looking to try and understand just exactly what constitutes “User Verification”. Ideally, I would love to find something along the lines of a RFC.
It also seems to me that there are nuances between “required”, “preferred” and “discouraged” that Bitwarden may be ignoring, such as UV being optional in the default (“preferred”) case.