For me, randomly generated passwords(via proton pass) combined with remembering to check the URL stops phishing and is easier to share.

Passkeys are a solution for a problem that the users didn't have (website security).

And the solution was: make it the user's problem.

Yay.