@timbray big issue is once every few days I'm dealing with some Microsoft application that needs azure admin but lacks support for passkeys because it is still using an older login method. Even the stuff for globalsecure access Microsoft's VPN thing can't be installed via a passkey only account. Some you can force to use the device path for login and copy a code to the desktop where you can use passkeys. Still awful