Your wife's experience sounds very bad and the risk of getting locked out of your various accounts is serious.
That doesn't mean giving up on having good security, though. Passkeys don't work like eSims and other users' situations might not be the same. Their failure modes will be different. They might have more than one device (like a phone and a tablet), or they might not use MS Authenticator for their email, or they might have set up different recovery methods?
We need more backups and user education, which ideally would include rehearsing account recovery before it's actually necessary.
That doesn't mean giving up on having good security, though. Passkeys don't work like eSims and other users' situations might not be the same. Their failure modes will be different. They might have more than one device (like a phone and a tablet), or they might not use MS Authenticator for their email, or they might have set up different recovery methods?
We need more backups and user education, which ideally would include rehearsing account recovery before it's actually necessary.