This is why onboarding the masses will inevitably be mostly custodians with a login (e.g. alby, fountain, primal, strike, wallet of satoshi)

The average person cannot adequately handle private keys that they have to take responsibility for.  The average person wants to offload that responsibility to someone else that they can call when they forget their credentials. The average person still doesn't use a password manager.

We have a long ways to go to make this more seamless, and generations of education to perform before this will change in a meaningful way.