Comment by tptacek

These are endpoint malware attacks, not attacks on Passkeys per se. This is already a game-over position for an attacker to be in.