Comment by mooreds

> Yep, any time you're asked to set up a passkey it feels like Russian Roulette with future access to that account.

We rolled out passkeys a couple of years ago (I work for an auth/CIAM provider). This was before most passkeys were synced (which gives me the heebie jeebies--that's a valuable set of private keys to be shipping around).

We built passkeys to be an alternate login method, not a primary one, for that exact reason.