Your first point is what we already do! We tell someone to download Primal, for example, and then we say oh way go to GitHub and download Amber, a random app, to sign into Primal. We could solve all of this if Primal was the signer! This is essentially what Damus is going to do with Notedeck! If it's good enough for @jb55 to rally behind, then it's probably good enough for others to consider it. Your second, point I also don't agree with because this can easily be hidden away in advanced settings. I do agree with your last and final point though. However, I would concede to code reviewer's approvals.