Can’t they just create a set of keys and use them for protest admin stuff? 

No one is writing down their private keys, that’s what Passwords is used for on iOS.

From Login page, at bottom “or use email”, add “create new keys”, then users save it to Passwords

And change Get our PWA to Add to Homescreen https://image.nostr.build/e1ed05e90924cf859dfab8e61490d7e71faa9af76d98dad18f3294607546819e.jpg