Password managers aren't replacements for passkeys

> the FIDO Alliance’s Credential Exchange Protocol and Credential Exchange Format to allow for passkey private keys to be securely migrated between providers

Doesn't that require the sender to trust the receiver in advance, which in effect means that it will be possible to go from one megacorp to another, but never to anything open source and self-hosted?