Microsoft is replacing phishable SMS and voice-based MFA with passkeys as the default sign-in method for Microsoft Entra ID in the public cloud.