This is a major concern, especially if we're trying to move away from passwords altogether. Passkeys need to be super secure to really gain traction. https://scotthelme.co.uk/xss-is-deadly-for-passkeys-the-hidden-risk-of-attestation-none/