None of them? I can sign a remote challenge, cryptographically prove I know the key without revealing it and still use the app...

This is not new tech.