609: You're the Oreo Cookie

2135.541 - 2154.4 Marco Arment

It doesn't even have to transmit it. It could do all the hashing locally or encrypt it locally, but whatever. You are handing over your private information. That doesn't happen with passkeys. They're more like SSH keys where the private thing is never given to another piece of code. You are given a thing, which then you sign with your private thing, and then you chuck the other thing back.