Passkeys work, but account recovery is still the weak spot

You can already log into many accounts with your face, fingerprint, or a short PIN instead of typing a password.