Because password managers allow you to use a password and 2fa even if the url doesn't match. And sites often legitimately change domain or have multiple domains which trains users that sometimes it doesn't work and you have to override the automatic matching.

Passkeys physically don't allow you to send them to the wrong sites so the sites have to make sure they keep working.