[jeroenhd]

Passkeys work, password managers with autofill should also work. You can override password managers, but "why can't I find my credentials" makes you look at the URL again at least once.

For Bitwarden, this will be the hostname, and as such, will tell you that you don't have any passwords for moc.margatsni.nl

There are design issues at play here, but mitigations for most types of phishing are already available. Websites need to implement Passkey support, but any username+password website should work perfectly fine with password managers.