I haven't swapped to passkeys because every website seems to implement and use them in different/strange ways. There's still no standardization here. Also the notion of just wanting everything in my KeePass + have it all integrated is my goal, and right now, that's just not a thing.

Strong password + MFA is still the way.