“For everybody else, it is currently a step back.”
Passkeys fix phishing, which is the enterprise’s problem. For a normal person the bigger risk is losing a phone and getting locked out of everything. Recovery still falls back to email or SMS, so the weak link never left. Nobody mentions that the platforms get tighter lock-in every time you sync your keys to their cloud.