text: Passkeys have phishing resistance baked in and aren't based on anything that a user can reuse across sites. This eliminates many common attack vectors that passwords (and even common 2FA methods) leave users vulnerable to. Where are you seeing gaps that require pairing them with (phishable) 2FA?