> sites are extremely pushy about replacing your perfectly good password with a passkey Your password was never “perfectly good” because it is easily phished.

> sites are extremely pushy about replacing your perfectly good password with a passkey Your password was never “perfectly good” because it is easily phished. Even with TOTP or a push notification app as MFA. Phishing is an huge risk even for “expert” technical users, and such phishing is the cause of a huge number of breaches and supply-chain attacks.