“I think I know how to use passwords securely, so passkeys are annoying and nobody should use them.” is tech-speak for, “I don’t care about the online account security of other people.”, or more succinctly, “I don’t care about other people.”

People overestimate their competence and underestimate the cost of phishing and credential stuffing. Individuals having to learn to use password management software and be vigilant against phishing is an industry failure, not a personal success.