I thought all passkeys were phishing-proof until I learned about synced passkey theft

Open original source
Back