Comment by cortesoft

Yeah, you are right. I don't know what I was thinking when I said that.

Little harsh to say I have NO idea what I am talking about, though.

I still don't agree that companies won't revoke their passkeys if we are in a PQ world.

If they don't, you are still in a better place than passwords. Each public/private key pair is unique for every domain, so a compromise in one place is not a compromise in others. Many people re-use passwords (even if you don't).