Maybe I've had too much coffee and I'm impatient, but this kind of article bugs me. It has a tremendous amount of valuable detail but you don't learn why Passkeys are a trap until you've read like 2/3rds of it, and it's impenetrable to anyone who isn't a CS professional of some sort.
Add a TL;DR at the top perhaps.