How to control available sign-in methods of Windows Security (CredUI) window?

Question

How can we control the available Passwordless / FIDO2 options shown on the Windows Security (A.K.A. CredUI) window?

Furthermore, how can we reorganize which options show up as default and which options are hidden behind the more options link?

These:

Or hide the automatically created Passkeys because they can't be used, but they got created automatically?

I was told currently it is not possible to control these with Intune, but there is a way (I just don't have $400+ to pay for a one time support request).

Another example, you might need to manage lots of remote servers with a good old smart card - which is the original passwordless solution - but every time Windows ask for your credential it presents the Windows Hello options like PIN or Figer print, which is annoying because you can never use those, so it would be nice to change the defaults and save time by doing that.

Thanks!