> You get a link (or more commonly a QR code) that you open from the device on which you already have the passkey to grant access to the new device.

Because surely such devices never get stolen, or dropped from a cliff.