honestly even that aside passkeys are just fucking weird some providers like yandex or microsoft apparently expect you to use hardware keystores (secure enclave, tpm modules, etc) most other services are just fine with regular storage like bitwarden vaults or kbdx databases

fwiw it's not a bad idea to have hardware-backed passkey storage but you have to get the UX right this...isn't that