If a service wanted to do that they could already do that, you even point to an example with a platform requiring their specific app to use the account. I've had banks which required me to have their own time-based code physical security tokens to log in, isn't that in the end the same?

This thing you're talking about isn't inherently a thing about passkeys. If a service wants to remove your ability to log in to their service they can do it in a million different ways.

Also, the above poster said:

> deplatform you with a single click across all your accounts

"They" could do it across all your accounts with a single click. If service A decides to require attestation, how is that now affecting all my accounts?