Security is never perfect, if your device is already compromised, you have bigger issues. None of the traditional methods would protect against compromised devices anyway.

The point is that passkeys significantly reduce the attack surface.