Not saying you think this, just adding to the conversation.. the pin is to unlock that factor and passkeys should not be taken to mean that MFA for accounts is not needed.
> this means that passkeys protect you against phishing and any accidental mishandling that passwords are prone to, such as being reused or exposed in a data breach. This is stronger protection than most 2SV (2FA/MFA) methods offer today, which is why we allow you to skip not only the password but also 2SV when you use a passkey.