number-one

I get the intent of keeping things more secure, but I think the real issue here is that not much thought (so far) as gone into the disaster cases where passkeys are unavailable (either because of broken hardware keys or software glitches). Sure, people recommend registering multiple passkeys for the same service but that gets super cumbersome very fast.

Ultimately if a user wants control over their own keys so they can have a failsafe for recovery (and handle the safety of those exports themselves) they should be able to do so. Until we have very safe mechanisms for backups of passkeys we'll never be able to truly disable other very insecure forms of account recovery without too much risk.