Except that that thing you memorized gets transferred across the wire as part of the authentication process, leading to all sorts of places where it could be in

Except that that thing you memorized gets transferred across the wire as part of the authentication process, leading to all sorts of places where it could be intercepted. Passkeys don’t leave the device, outside of backups and synchronization. Thats a way lower attack surface.