This ^. It introduces MORE layers to phish. More external 'trust me'.
ESPECIALLY when seemingly no one actually knows how passkeys actually work.