Comment by thoradam

Tin foil — third parties can be passkey providers: https://blog.1password.com/apple-passkey-api-wwdc/