Exportable passkeys are objectively still better than passwords or totp 2FA. But it’s also a marked downgrade from hardware bound keys, and in a way that seems pretty transparent to the user.