fatalicus

Password can also very easily be stolen during phishing, while passkeys are phishing resistant.

And while a hardware passkeys can be stole and used, those who steal them will still need the pin to use them, and the two major hardware passkeys options now (Yubico and Token2) both have some pin brute force protection in their firmware to slow someone down long enough for an account to be secured another way.

As for passkeys on phones, they require the pin or biometric used to unlock the phones to be used.

Is there a proper syncthing android client now, after the official android client was discontinued?

KeePassXC has passphrase generation built in