At least once we reach the point where we use passkeys everywhere - which as far as I understand is the safest authentication method? Then a new phone will not

At least once we reach the point where we use passkeys everywhere - which as far as I understand is the safest authentication method? Then a new phone will not have the trusted keys since they are stored in the hardware of the stolen phone.