@rmondello For another example, it used to be common for a website or app to ask for your password for a different site. Of course, I am not going to frame this if it was a good idea, but even now - if an OAuth API is not provided or not sufficient for what a user wants to achieve, acting as the user with their credentials, is literally the only option to make the computer act in the user's favour, but because this is also the way genuinely malicious actors interact with a service, it's easy to lump together all this kind of adversarial behaviour into 'malicious' or 'fraudulent'. And of course, Netflix aren't too happy about user's sharing their password, but I don't think it should be the job of my password manager to protect Netflix' business model.

And, another thing given the whole Recent Current Event Cycle: I can't backup my 1P vault with Passkeys, so if 1P (or the friend who's family plan I leech off, or the company they work for who provide said plan) suddenly close my account - I'm SOL.