I'm less concerned about loss of access than with what happens if your key is stolen and can be used to log in because no password is required. Just pressing a

I'm less concerned about loss of access than with what happens if your key is stolen and can be used to log in because no password is required. Just pressing a button is not strong enough. Now, Apple/Google/Microsoft implementing Passkeys with proper device authentication is perfectly fine. Perhaps I should have specified "FIDO U2F" rather than just "FIDO".