If you use a password manager like bit warden, on a compromised machine, the credentials used to log into a site, could get copied. Then somebody else could log into that site as you.

Using pass keys, or hardware security keys means the private information never goes over the internet. So somebody who’s compromised the system, still doesn’t get the private key. So they can’t impersonate you later