Little harsh to say I have NO idea what I am talking about, though.

I still don't agree that companies won't revoke their passkeys if we are in a PQ world.

If they don't, you are still in a better place than passwords. Each public/private key pair is unique for every domain, so a compromise in one place is not a compromise in others. Many people re-use passwords (even if you don't).

Also, the same risk applies, but to an even greater degree, with a password.

That might be true now, but it would not mean house prices would go down, it just means more people would rent.

Think about how these loans work right now... people with money they don't need right now loan that money to people who want a house but don't have the cash right now. The reason they loan that money is they want to earn a return, which they get in interest on the loan.

Let's say all consumer lending is banned, and you can't loan money to people to buy a house. Well, the people with that money still want a return, so they will invest it somewhere else. Where can they invest it?

Well, one option is they could buy houses and rent them out. Since they only have to compete with other people with money (since poorer people can't get a loan for their house), the price is going to be much lower than it is today, which means they can get a better return by buying the house and renting it out.

So now you are still in the same situation with house prices, but there is no way for you to get any part of that return.

This means you never send your private key to the site, so if their database is compromised they only get a public key, which can’t do anything (it is public, after all)

No amount of phishing can get you or your client to hand over your private key, because there is no use case where that is required. There is no possibility of MITM, since your private key is never sent anywhere in any situation.

As for getting locked out of your account, losing your passkey would be the same as losing a password. You would need to follow the site’s password reset flow, and if you can recover from a lost password, you can recover from a lost passkey.

I don’t think there is any rational argument that ALL lending is evil (there are certainly many categories of lending that have lots of arguments for its evilness)

If we don’t have credit, then the only people capable of starting a business, for example, are those who are already wealthy.

Vaultwarden already exists