Right. It didn’t suggest it but the phishing message was convincing enough that the tech-savvy person fished the password out manually and input it anyway. A mistake for sure, and one the password manager was trying to help with, for sure, but this mistake would have been impossible with a passkey.

> this mistake would have been impossible with a passkey.

But GP is saying that when the passkey is not auto-entered, the user will just use password-based login.

So the mistake will still happen even if passkeys are enabled and used, as long as password-based login remains as an option.