This sort of shit is the reason they will never get me to use their passkey implementation.

The sooner there's a truly portable open source offline version of passkeys I'm all in. Until then I'm sticking with my password manager.

I do feel the only thing you can really trust from Google are the things that make them money. Chrome, and any software that allows them to hook into for advertising money. It makes me worry about go, dart, and flutter. Though the latter two include analytics which you need to disable.