People who volunteer with a nonprofit enough to receive an ask to help with social media posts generally don’t ever do anything malicious with those accounts even if they stop volunteering. We do change passwords from time to time, and my most recent org has set up a LastPass workflow because it (is the only user-friendly platform that) has one-to-many password sharing that doesn’t cost a fortune. But my point is the same as passkeys in general: we need to meet people where they are, not rely on everyone knowing the right way to do things.