[ylk]

I’m saying most people who do phishing likely don’t care to implement passkey detection to display a relevant error message to the user, as it’s not worth the effort, as of now

[mort96]

Which means they'll just ask for passwords, which users will happily input since they know they have a password for the service.