Comment by kogir

It’s the passkey that should be protected with MFA (biometrics, PIN), not the account with the third party service.

My Yubikey supports passkeys and protects them with a PIN of my choosing. No services need challenge me further.