> To suggest that people should stop using Passkeys over this is throwing the baby out with the bathwater.

Nah, it's fair to regard anything that supports remote attestation as toxic and aggressively thrust it into the biohazard waste incinerator. Any whiff of remote attestation, even being adjacent to it, and an angry mob should appear to burn your entire castle to the ground. Deters companies from wanting to be associated with it.

Also impedes the motte and bailey where they claim you can opt out of it until it's entrenched enough that you can't.

> no-one is forcing you to use said service in that case.

Until something with a monopoly or both halves of a duopoly or a strong network effect starts demanding it.