Recent updates to Microsoft account sign-in now support passkeys with device biometric authentication, making phishing virtually impossible.
So according to Microsoft biometric authentication will make people immune to being tricked. Pretty ironic stance.