Comment by beej71

> Passkeys are too strong and may cause account loss. Passkeys are too weak and can be bypassed by account recovery.

Turns out, given the variety in the ecosystem, both these things are true depending on where you look.