More accurate title for this article: "hardware-attested, non-copyable #passkeys without another 2FA fallback will be a trap as soon as websites decide to require them" nonfunctional.substack.com/p/passkeys-are-a-trap-do-not-use-them