Comment by isodev

Of course they are, if Apple loves a standard then it contributes in some way to platform lock-in. Safari is configured to automatically upgrade user passwords to passkeys (no user intervention is required with the out-of-box configuration of macOS) as long as the target website adopts the necessary APIs. And just like that, you're in.