I don’t think this ever works with passkeys stored in pw managers though, only Face ID/whatever Android is doing?

Why does a passkey need bluetooth? For what? Isn't that another vulnerability?