A decent degree of phishing protection. And passkeys are not vulnerable to an attack that can transiently read server memory.