291
Google will now make passkeys the default for personal accounts
(arstechnica.com)
This is a most excellent place for technology news and articles.
Even FIDO2 MFA doesn’t protect you from attacks that involve malware running on your machine. If there was a keylogger on their machine then that machine is likely compromised in other ways, and any credentials entered or stored on it should be considered compromised and should be reset.