Google Passkeys Weakness

[...] I'll note here the fundamental issue. In their promotion of passkeys,
Google attempts to gloss over a key weakness (no pun intended) in their
passkey implementation, and in my discussions with them to try "minimize"
the importance of this problem.

Google's current passkey implementation is completely dependent on the
device security on which passkeys have been deployed. Google has not
provided any mechanism for secondary passwords or other authentication
methods to specifically protect passkeys if a device is compromised. …

current device device security discussions google implementation issue key passkey passkeys problem security weakness