Still not secure enough, sadly. They can be captured, leaked, stolen, phished, etc, and that's if you use them correctly.

Passkeys can't be stolen, got it. :)

Yep, hardware Passkeys can't.

Physically impossible to just take someone's HW token. And firmware/HW has no bugs, so malware taking the keys is also impossible to write. There were never ever any FIDO token vulnerabilities and never will be.