As an aside, I think this is the source of his confusion about password-less accounts. From Google's help page:
> When you create a passkey, you opt in to a passkey-first, password-less sign-in experience
That comma right there reads; "you opt in to a passkey-first _and_ password-less sign-in experience". I understand what they mean, but that kind of marketing speak is often misunderstood by more technically focussed people.
