> Consider passkeys as a standardized interface for password managers.

I have not followed WebAuthn spec for a while but I vaguely remember that the spec discouraged software-only authenticators.

Which made me feel like WebAuthn is yet another attempt to take the power from users and even states and concentrate it in the hands of a few multinationals controlled by US government.

Pretty much what happened to Certificate Authorities and the push to use HTTPS everywhere.

Of course there are benefits to HTTPS Everywhere and to passwordless authentication.

But they do not outweight concerns over the digital autonomy of my country.