Comment by Fysi

A caveat to this is that you can use an arrested passkey on a consumer Apple device via something like Microsoft Authenticator.