I've not tried [Webauthn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API) in the context of Extensions. This might be a good option to lock/unlock the wallet.