passkeys use a unique keypair per account, there's no single public key that represents you.
But as DecoPerson points out, in the realm of account creation, your "verify the email address first" solution has its limits.
It is easy to conflate different aspects of trust and think they have the same solution.
passkeys use a unique keypair per account, there's no single public key that represents you.