Until they only allow specific AAGUIDs to enroll passkeys that don't include the one used by KeePassXC (fdb141b2-5d84-443e-8a35-4698c205a502) or KeePassDX (eaecdef2-1c31-5634-8639-f1cbd9c00a08) because they don't consider them secure enough.

https://aaguid.nicolasuter.ch/

vendor lock-in and potential future corporate enshittification are non-issues.

For now.

In some countries, banks require users use their app on IOS or Google'd Android. You can't use their services via browser, LineageOS, GrapheneOS

The argument from the "it's a trap" article is that the service you are registering to can use attestation to ensure that you are only using passkey managers that they approve.

I have to admit that I haven't investigated this thoroughly myself but if the protocol can be abused in that way then your only choice really would be not to use the service. If it is related to banking or government services then you may not have much of a choice.