Passkeys Are Cryptographically Simple Compared With Their UX State Machine
WebAuthn can prove possession of a scoped private key. The product still has to reason about synced credentials, discoverable accounts, conditional UI, recovery, re-registration, and what the browser chooses to show.