At this point, you’re just making shit up about something you don’t understand.
You're ignoring the fact that WebAuthn can require attestation, which will remove device choice from the equation.
> Nothing compares to the secrecy of password.
Because they are soley internal to you.
Yes, you can generate passkeys at will ... and then you give them away to a usb dongle or HSM, from which some day you might not be able to export them, because vendors love their locked in customers.
I am talking about control and yes, my concerns are speculation but reasonable to me, when you look at pretty much all the recent development. From not-WEI over DRM, to right to repair and on and on.