Your argument is exactly why people conflate passkeys with cloud syncing and vendor lock-in.