That's a good thing?

Most consumer websites won't use attestation.

Places where additional security is required (bank, employer, etc) can.

Access is a good thing too. I don’t want hardware attestation, i want to be able to access my bank from anywhere. Banks continually push their liability for security onto customers.

Most consumer websites won't demand you share a scan of your face to third parties, until they do. Same exact thing will happen with passkeys, guaranteed.

People who are more tech libertarian don't like when critical aspects of their life requires a smart phone from either Apple or Google. The ability to avoid these companies is becoming increasingly difficult, and attestation is one piece of that puzzle.

I don't think that means throwing out passkeys entirely, but that's why you're seeing a lot of "slippery slope" stuff in here