This sounds counter productive. Third party authentication providers are a single point of failure, and usually they themselves require a password to authentic

This sounds counter productive. Third party authentication providers are a single point of failure, and usually they themselves require a password to authenticate you anyway. If your gmail password is hacked, then effectively all your accounts on websites that use Google auth are also hacked. Passkeys appear to also be handled by central services? At least that appears to be the case with Apple, according to the link in the post: https://developer.apple.com/passkeys/ https://developer.apple.com/passkeys/ I personally think having a browser-managed "private key" (the same kind used for ssh auth) would be better, but now as a user you have to manage the multiple private keys you have associated with an account; a totally confusing concept for the average user.