Passkeys are a trap. Do not use them
Summary
A critical piece arguing that passkeys are not inherently better for users and can reduce control due to features like remote attestation and multiple interchangeable passkey variants. It explains how vendors and standards bodies may push passkeys, compares them to TOTP, and warns about potential privacy and software-lockdown implications.