with an excellent response to that warning here: https://news.ycombinator.com/item?id=39706876

Yep, I agree with that response completely. That whole thread is a great read about the reality of the passkey situation, and what it will take to really make it great.

The entire passkey situation is pretty telling that the spec was created with just vague promises that export would be handled at a later date.

Thank you for posting this comment. I'm saddened but not surprised that attestation is being seriously talked about as a way to get independent password managers in line but not large corporations, and completely agree with Dan there.