Your milage will vary with your corporate policies. You’re not wrong, but you’re not completely right.

I can’t just pick up any smartphone and install a passkey manager on it. It has to adhere to some specific hardware requirements (like a dedicated chip or instruction set on a CPU).

So yea, in standing by the 2fa dedicated hardware line. It’s easier than getting into the weeds on hardware device configuration.