AFAIK, passkeys are stored in the cloud after the encryption there is no way that someone can decrypt it even if they have accessed the file by hacking the server or your cloud account still you need the biometrics such as PIN, password to decrypt once you logged into the new device. And that is the whole point of this being convenience which is less secure than the traditional way of strong seeds but you know people always prioritize convenience over security.
![Roll Eyes](https://bitcointalk.org/Smileys/default/rolleyes.gif)
There will always have to be a reasonable compromise between convenience & security & privacy.
Cash is not secure, if you drop it and it blows away it's gone. If someone steals it it's gone. BUT you have good privacy and it's convenient.
Credit cards are secure. If you loose it or someone steals it no big deal no loss for you. But there is no privacy and they are convenient.
It's all about what works for you in the balance of these things.
-Dave