@pushix
Once again I feel that what we need is a strong delegating system. One root key that if compromised loses a lot and then keys per app that localize the damage.
Protect master key with social recovery and other multi-factor systems.
Agree this is a big issue.