What about better / smarter remote signers (aka bunkers)?
Discussion
username & password or oauth, with password reset.
so what’s the difference between a passkey and a code in my passwords app.

Your passkey is tied to a hardware property
I kinda built that:
https://github.com/coracle-social/burrow
Bad idea unless you're souping it up with enclaves or multisig bunkers.
nostr:nprofile1qqs8d3c64cayj8canmky0jap0c3fekjpzwsthdhx4cthd4my8c5u47spz4mhxue69uhhyetvv9ujuerpd46hxtnfduhs3w8c9w