Comment by mahboi

I did think about that, and the answer was fair enough, they don't want MITM. None of these details about passkeys make any sense. The author hasn't explained why this isn't a simple public-private keypair.