We do need a smooth onboarding process that does not encourage 'bad actors' (but actual bad actors are okay). I think an invitation system where you could automatically allocate a given person some delegation would be good. We know people are willing to install apps for other platforms, so Keychain should not be such a big deal.

Perhaps it could integrate more with things like peakd and ecency to simplify things more. e.g. new user is given keys to import into Keychain and then gets a button to log them directly into one of those front ends. You just can't really get away from having to let them control their keys.

There needs to be simple backup of keys too. Keychain has a way to transfer them to a new device via QR code, but perhaps it could export them to things like Google Drive or other apps, preferably with a password.

Most users will not be technical so everything needs to be as simple as possible, but not simpler than that :)