I have to agree that for the simple steem user, these keys need to be abstracted away like they are with keychain. Better still, that needs to be combined with a 2FA solution and some sort of key escrow method for account restoral. Something where advanced users could still function as they currently are, but also an easy-button solution for the unsophisticated user. Perhaps a 3rd party integration with a project like Civic or something similar to handle authentication.