A big issue detering new nostriches is the convolution on the key system (although I love it). More Oauth like experiences could be a huge boost in accessibility for the less technically inclined.
True, keys are scary if you're not coming from bitcoin space.
You can literally copy and paste them into a password manager.
True on many levels; keys also make it easy for developers, but without key rotation or universal recovery (similar to what legacy web have with email), it also becomes a liability. Many users aren't ready for that, especially when features like passkeys, one click login. I also happens to believe in case of nostr, we can offer passkeys like feature in trustless manner. I think that should be our goal.