> Password handling: Argon2id or scrypt. But have you considered passkeys instead?
I hate passkeys and if your service doesn't offer an alternative then I'm not using your service.