@publicvoit@graz.social @mkristensson@thepit.social I'd argue that sharable, syncable passkeys are still quite phishing-resistant and far more secure than traditional modes of authentication. You can't give your passkey to someone over the phone, it can't be shoulder-surfed or captured by a key logger, and you can't be tricked into putting it into the wrong website. Getting a non-technical person to export their passkey and send it to you is a much higher bar.