The authors concern is primarily about attested and user-verified passkeys.