Today some CSGO steam accounts got hacked with 2 Million worth in items:
https://twitter.com/ohnePixel/status/1539286332006182915
- ohnePixel
Maybe fake news, idk. I don't check it.
But way more interesting is the topic itself.
NFT´s should be censorship-resistant and include true ownership ( should be). No one should limit trading them. Because that's the point of them.
The CSGO example shows 2FA can be easy used to lock someone out. A mistake by the owner, maybe.
But we already see people give away seed phrases to randoms on Twitter and opensea chat. Those people lost millions. By simply being stupid.
So what can NFT 2.0 do to be "retard friendly" or in nice words, ready for mass adoption?
Splinterlands has a lock feature for NFTs, that's cool and active key for trades.
Already a good solution but not perfect because it vacuums the NFTs not from other assets.
Better than all EVM chains.
So NFT 2.0 - What do they need?
Custom keys.
Signing NFT transactions could need NFT key ( Or NFT trade key).
It would be the same as active key, but exclude other assets from NFTs. Already an improvement.
But that's far away from the "custom key".
What if you can combine a specific NFT with a unique key? Asymmetric encryption would allow it ( public-private key).
NFT ( like a valuable Bored ape) + unique key for transactions. Someone steals the wallet, But I can't access or transfer the NFT.
But the owner can access the NFT if he has the key.
This could be an optional feature for extremely valuable NFTs.
I know multisig would be the same, but far away from being user-friendly.
I like the idea of " click to generate custom key" and lock up the NFT or transaction.
Custom keys have a lot of room for cool things. Maybe the keys Themselves can be the NFT ( access NFTs for example).
Another level could be an app for keys ( for mass adoption). Like 2FA they scan a QR code for key generation.
Smartphone holds the key. They can also download the backup seed.
like a Keychain for NFT ( or expansion of the current Keychain if at some point that would be possible).
This could be working. I think 
QR code scanning for keychain mobile is the key feature for daily life use. For payments and so on.