@adamz
Agree completely. We actually built something to this effect. Would love your thoughts, https://passkeys.dynamic.xyz/
There are some nuances around domain support. As you mentioned, you want to have app-specific passkeys to reduce potential phishing vs a single global passkey. What are you thinking of building?