personally it works well for me as a way to login.

however, lately the anti-bot/spam shenanigans from big tech has ruined any ux work they have spent trillions on.

<rant>

one fine day, i was trying to log into my google account at google's office. for some reason their internal wifi was serving the internet through a corporate vpn, which was based out of the US. this tripped their security system, which then made me jump 3-4 hoops to log in back to my account. i recall sms verification (where you send them a code), some part where i had to scan a qr code and open on my phone (not logged into google btw), and the usual 2fa, among others.

likewise ticketmaster asking for verification for a decently used account over the years out of the blue. this is when booking a new ticket from a residential internet without any shady business. was made to reset my password three times in a row, and still got blocked!!!

</rant>

the false positive rate of these systems have reached a boiling point at some instances. yet they don't seem to stop the spammers and scalpers, but cause great pain to regular folks who don't pass the sieve. passkey-based verification is just a symptom of the larger problem.

PS: don't even bother using a non-normie browser, as it is a sure-shot way to get restricted, even on this website. it is as if we are all using tor browser if it is not the latest chrome.