I am not sure if this is what @Kevin meant, but this is what I think you could do better with PassKeys - simple login using PassKeys instead of using PassKeys as 2fa. Passkeys are strong enough as both "something you know", and "something you have" removing the need to use password completely. User could just enter username and use passkey.
I understand support for this is limited at this point, until all devices start supporting the PRF extension for passkeys.
I am not sure if this is what @Kevin meant, but this is what I think you could do better with PassKeys - simple login using PassKeys instead of using PassKeys as 2fa. Passkeys are strong enough as both "something you know", and "something you have" removing the need to use password completely. User could just enter username and use passkey.
I understand support for this is limited at this point, until all devices start supporting the PRF extension for passkeys.