Comment by awinter-py

can someone who understands the cryptographic basis explain how centralized this is?

it sounds like an app can consume passkey logins without registering with a provider?

do providers phone home when I log in? can providers block an app from using them?

can I self-host a provider, or is there a shortlist of approved providers?

is there any provider that allows me to backup private key without sending it to their cloud?

is it similar to openid in that it shares email etc with the app on login?