most people don't have the technical capacity or desire to do it that way. Vast majority of users will just use the website. They need simple security. I don't even know how to use the posting key and I'm not a noob with this stuff.

right. but hacker will know how to use the cli wallet.