tl;dr: Passkeys, pushed by the FIDO Alliance, bundle many different credential types under one confusing name, and the standard includes "remote attestation" — a feature that lets websites verify you're using approved hardware, software, and OS. While attestation isn't widely enforced yet, the author warns it could eventually be used to lock users out of alternative operating systems, custom browsers, or self-written software, undermining user control. The recommended alternatives are TOTP (authenticator apps) for convenience or hardware security keys like YubiKey for high security without OS-level lock-in.