“Huh, wonder why that didn’t autofill this time.” Person copy/pastes password from manager into phishing site. Browser extensions do not prevent copy/pasting,

“Huh, wonder why that didn’t autofill this time.” Person copy/pastes password from manager into phishing site. Browser extensions do not prevent copy/pasting, or typing in, passwords. In contrast, there is no way to copy/paste or type in a passkey if the phishing site fails the key check. Now you might say that YOU have the discipline to never do this. And it might be true. But that’s not the same as saying autofill passwords are not phishable.