No, but the “normal, worst case” usage of passwords is still far worse than even that case. Most people just re-use the same password for everything. This is why almost all companies use phone numbers and text messages as a totp now.

If we’re comparing worst usage of passwords vs worst usage of passkeys, passkeys still wins.