@rakekniven Zero and also important to note that I do not plan on adopting passkeys. Their implementations are of wildly varying quality and widely varying security. They also tie authentication too strongly to devices that can be lost, hacked or coerced to be unlocked, make assumptions about what every kind of user has access to do and obscures authentication mechanisms behind more opaque user experiences (this one, truthfully, will be less important if they're widely adopted, common and familiar to the general public, which makes a further assumption about how well that will go or how long that will take).

I also have a minor, semi-serious hunch that passkeys primarily exist so that organizations can offload responsibility when password breaches happen since they won't store private material, only public keys for accounts - which is valuable in its own right for groups interested in surveillance and invasion of privacy. If implemented poorly (reusing keys or using derivative keys in an insecure way), it also allows for mapping a user's accounts across many services (something that hacking groups might not have the full capability of but are just one sealed warrant away for governments...)