"malware already present on a Windows endpoint take over accounts protected by Google-synced passkeys in Chrome"

breaking news! If you completely control a computer, you can completely control a computer! This means doing anything the computer can do, such as logging in with passkeys, and using "passkey sync" functionality to sync passkeys.