If the GMS Core / Credential Manager passkey sheet appears over this page for an attacker-controlled RP ID, the visibility gate has been bypassed.