I actually spoke up about this at a local chamber meeting today during my 30 second elevator pitch. I decided to give a brief cybersecurity awareness month pitch about having backups for your 2FA and to be wary of passkeys because you will be locked out on device changes.

I think they are a trap. A usability nightmare. So, I acquiesce to a passkey to a site while on my iPhone and now I cannot log onto it from my work desktop in Firefox. An older person sets it up on his or her Google account, gets a new phone (iPhone to Android) or Android to iPhone doesn't matter and loses access. We know that Google won't help a regular consumer with anything.

Syncing may be a thing in theory but the friction is huge.