The standard has portability mechanisms, both for ad hoc authentication across ecosystems (I logged into login.gov yesterday on Chrome browser using my iPhone passkey) as well as exporting passkeys to ecosystem independent vaulting systems.

It makes sense to approach this new paradigm with a healthy dose of skepticism, but there is evidence your concerns have solutions.