It's not clear to me how a site can mess up a password field but not mess up a passkey prompt, though.