Passkeys are worthless if you cannot create a backup. This poses as a blatant risk to security that is often neglected to be mentioned. I guess this is purely due to attestation ambitions of companies.
So, yes, username + password or more generally a secret known only to you is superior.