@garrett-davidson regarding real life examples - I am developing a SaaS platform for psychotherapist to help them manage their office and clients and as a part of that there is also possibility manage client session notes within the app. As that is highly sensitive data, I am encrypting it on the browser, so that there is never a plaintext version on the server. However, due to the lack of prf extension, I am unable to use passkeys to unlock this data, though I am using them to login to the app. So the UX is not that great - people can log in with passkeys, but when they want to use notes part, they need to enter a separate password, which is used to derive the encryption key.