You do not currently need to unlock your phone, computer, or internet accounts for law enforcement though the legality is fluid. But with a passkey I cannot imagine law enforcement exercising any restraint.
The same goes for any one else seeking access to your accounts or computer.
Sure, there are other ways to get that information but I'd imagine it's better to let them use those.
Using a USB stick as a passkey without authentication is just a bad idea.
Ps. passkeys are end-to-end encrypted on Apple devices using iCloud keychain. Sure, Apple could push a software update that exfiltrates your passkeys, but in the end you need a trust anchor somewhere in the chain.
With passkeys, unfortunately, they'll have to keep you around for all their exploits, and may need to regularly re-threaten/beat you into submission.
In certain scenarios, there's such thing as too much security.
https://reason.com/2024/04/19/appeals-court-rules-that-cops-...
https://www.eff.org/press/releases/eff-supreme-court-fifth-a...
A physical pass key can have all the biometrics in the world and be completely unprotected from law enforcement. Requiring multiple devices is useless if all devices can be unlocked with things I can see you carrying.
Three PINs.
One gives stored records (including auto-typing) and 2FA.
One gives a second bank of records et al.
The third is a duress key which wipes the device.
Also, you can reflash your data to it from an encrypted backup in case you do use the duress PIN or lose the device.
I think it's pretty cool to put the key in, type an eight digit code, then press a button to type my Amazon/GMail login page into a browser bar, enter username, enter password, wait for the page to load, then enter the 2FA. All automatically.
Big love for this thing I wear as a dogtag 24/7.
Apples/Googles ecosystems are intransparent and not really portable.
Personally I am not really a fan of passkeys. Sure, login is hassle-free, but I am used to remember several passwords and their variants.
So the security totally depends on how the password manager is implemented. Mine uses storage that is encrypted by a long password.
Everyone knows how USB security keys work and now we have a slightly newer standard that new USB security keys use but also we can use devices with a TPM such as phones to avoid having to plug in a separate USB key. And now everyone's acting confused about it since there's also an optional ability to skip entering a password and just use the passkey in some circumstances but that part is not what a passkey is.