If they are not a trap, then the standard should be amended to allow third party implementations to forge attestations.

Otherwise, it is a trap. The story of the last 25 years of the internet is user hostile ratcheting away of the open web. Passkeys are obviously another step in the process.