Passkeys fix a different problem. In my eyes the problem is that passkeys do not fix a problem. They just shift it to another layer… I can backup a password however I like. I can backup a TOTP authenticator (or specifically the secret that works with every one of them) however I like. I can not however backup a hardware device with my passkey. And the websites supporting passkeys obviously know it and explicitly warn when you don’t have an alternative way of logging in configured as it’s pssible that sinple hardware damage or loss locks you out of your account. Thus the “fix for a problem” is now relegated to a shiny new way of conveniently pressing the button on a key instead of typing and remembering passwords, while the actual attack surface is still there but now sitting in alternative login/account recovery instead.