at most relying parties you can create multiple passkeys, so this is IMO a good solution until portability might be better

Never will be. Attestation is part of the spec and portability isn't. They are incompatible features.