[yummypaint]

Recent updates to Microsoft account sign-in now support passkeys with device biometric authentication, making phishing virtually impossible.

So according to Microsoft biometric authentication will make people immune to being tricked. Pretty ironic stance.