We should consider more on the assessment of the return value. Right now, we return true/false immediately according to platform specific procedures. See: https://www.w3.org/TR/webauthn/#isUserVerifyingPlatformAuthenticatorAvailable.
<rdar://problem/43357339>
The spec has changed such that this bug is no longer valid.