🔴 Phishing protection / 防钓鱼： Passkeys are bound to this exact domain, so a phishing site cannot obtain one. The authenticator code is added on top of that, never as an alternative way in. / 通行密钥绑定本站域名，钓鱼网站无法获取；这也是本站不用密码的原因。动态码是加在它之上的第二道，绝不作为另一条进入方式。