They're also not supporting device attestation which would allow websites to insist on particular implementations of passkeys.

That's more because attestation breaks their passkey cross-device sync process, rather than out of benevolence.