I logged into the Uber website with a passkey, and it sent my phone an alert that someone logged into my account. Tapping the alert took me to a page to report an account compromise. Then they sent me an email with a link to reset my password.
This isn't how passkeys are supposed to work. 😩