I can't read the whole article, but beyond verified clicks in email I worry that tech like Passkeys is going to get used against us. As soon as you take away t

I can't read the whole article, but beyond verified clicks in email I worry that tech like Passkeys is going to get used against us. As soon as you take away the friction of entering passwords, and let passkeys authenticate automatically, why not have authentication / authorization for every action? I get prompted to add Passkeys constantly. It makes me wonder if vendors will start doing it automatically "for your own good", like DoH in browser.