So passkeys achieve nothing if you can already use strong, secure, random passwords stored in a password manager?