I think the difference is that good passwords are still replayable. Such that moving away from bearer style tokens is a win. But if I have no way of controlli

I think the difference is that good passwords are still replayable. Such that moving away from bearer style tokens is a win. But if I have no way of controlling the use of individual passkeys, they lose a lot.