Last time I checked, Play Services needed to be installed and enabled to use FIDO in most applications (I know of no counterexamples, but it should be possible for apps to support FIDO without relying on Play), but Play Services did not require network permissions.