tl;dr: Passkeys solve phishing and breach risks well, making them ideal for enterprise use, but for individuals they introduce bigger day-to-day risks: permanent account lockout, device loss, and dependency on Apple/Google accounts that can be banned. Hardware keys don't allow backups and have credential limits, synced passkeys lock you into a platform, and third-party password manager integration is still clunky. The author recommends sticking with a password manager plus a separate TOTP app until the passkey ecosystem matures.