Ethereum Account Abstraction

are passkeys recoverable by the end-user if the associated domain shuts them out? and if not, what's the plan for wallets using passkeys that could theoretically get tapped by a number of agencies to shut down access for a particular individual or organization?

cc @wilsoncusack

At launch, we'll have the ability to backup with a private key to cover the disaster scenario in which the site is offline entirely. Longer term we're aiming to add more ways to sign and/or recover to keep access as decentralized as possible while keeping everything easy and safe.