Passkey IIRC requires a webauthn authenticator with resident key information I believe (it's been almost 2 years since I implemented webauthn from scratch) which requires the authenticator respond, even without attestation, with unique device identifiers, and if I'm not mistaken most built-in authenticators like yubikey will return model and platform identifiers.
Passkey may have reduced that, but it's another unique identifier for the normie that can be used by corpos, and from leaked information to identify devices.
Webauthn can be used without attestation, and without identifying credential information. In my case always as a second factor, not primary factor.
