The scary part is not about losing her phone. It's about having to keep the old, no-longer-secure Android phone alive just for passkeys after getting a shiny (and secure) new iPhone.

The problem here is really with Google and Microsoft than anything else. It's not like this problem doesn't occur already for other reasons.

She follows same reset flow as before. Passkeys are identical in this respect to the passwords of yore.