It seems like I have to trust more things that aren't very intuitive and are out of my control for passkeys to really be secure. For passwords, I only need to trust myself. I trust that I don't lose them, don't re-use them, and don't fall for phishing attacks.

Of course I also have to trust that whatever service I'm authenticating to does their part correctly, but that's the same either way.

I'm going to continue to use passwords.