This is generally the same experience I've had.

Microsoft is especially poorly prepared for this - Often if you have a passkey, it will CONTINUE To ask you to create a passkey (a new and different one), and it may save it in a different place, which is infuriating.

Strong password + MFA is the way, and I don't see that changing.