I hate the actual incarnation of passkeys because they're designed to take control from the user. But I hate this even more, take control and promote the bad practice of clicking weird links from email. When my bank sends me an email I never even use the link to open their homepage, I'll know where to find it. Bypasses phishing attempts from the bad guys as well as the lovely tracking parameters the other bad guys put in there.