Where passkeys are stored is as important as where physical keys are stored.

People must understand security controls, at least at a surface level, in order to effectively manage and trust them. Passkeys fail that test.