Because you can export plain-text passwords just fine, and they give you exactly the same access as a PassKey does.