[compressedgas]

But there is a fundamental difference. Password fishing is impossible with passkeys. You may authenticate to a site that you didn't mean to with a key you meant to use elsewhere but this does not allow that site to impersonate you on that other site.