Good point. Users can disable biometrics for their password manager and it will prompt for the device passcode instead.
Discussion
The passkey authentication flow is only needed during setup (backup/restore) and health checks.
During daily use, the seed is stored on the mobile wallet though. So standard security features like a PIN can still be set by the wallet ofc.