Your "SSH cert" option, in a consumer package, is effectively the passkey.
SSH doesn't prevent key sharing (and hence, phishing), so it's fundamentally different in the context of this discussion.
alt Hacker News
SSH doesn't prevent key sharing (and hence, phishing), so it's fundamentally different in the context of this discussion.