Its never transmitted, can be stored in HSMs. Anything that’s handled wrong is unsafe

dont think so. what i gatherd passkeys is a public/private key scheme, much like pubkey auth in ssh logins.

but it’s easy to calculate and compare with other offers. it does not stop working without subscription, which is the case with many other subscription models. actually I think it’s reasonable, as it also provides an incentive to continue supporting old models to the company and properly reflects the economic facts surrounding the product.

like, if you buy Samsung or whatever, this cost is also part of the price. if you lose or brick your phone, you still paid for updates you’ll never have the chance to install.

but of course it’s important info one should be aware of when buying this phone