Combining passkey authentication with MFA provides an additional layer of protection, ensuring that even if one factor is compromised, unauthorized access is still prevented. For example, if an attacker were to steal a user’s device, they would still need another form of authentication (such as a fingerprint or a one-time code sent to the user’s phone) to gain access.
https://www.authx.com/passkeys/