[cyberax]

Yes, clearly separating these two use-cases would have helped immensely.

This technically is true because Passkeys are just a subset of WebAuth.