Comment by raywu

Isn’t this what passkey is trying to sidestep? Assuming the user is at least authenticated on one device.