In this case, it's pretty true. You can view the webauthn protocol, the FIDO2 documentation, etc, that are the foundation of what we know as "passkey" technology.
It's all cryptographic hashes getting sent around, essentially. The more high-grade security implementations are "device-bound passkeys" which do require a minimal amount of hardware registration, though, but you shouldn't ever need to do that unless you're like... accessing sensitive datasets or secure services, at which point you're most likely registering a work device, anyhow.