If anything truly local and zero knowledge was allowed, there would be someone sharing their access eu-wide and everyone could install that and be done with it. One person authenticating millions.
Just due to that every system proposed has at minimum a central authority that does rate limiting.