But this is well established behaviour in the real world. That the passkey design doesn't take this into account only proves even more that it was designed in a vacuum.

The passkey design does take this into account, it's only the implementations that don't.