Onboarding should be by email or login with Google. Things that people are familiar.
Discussion
No one has solved this in a way that guarantees key security.
What about this? https://www.privy.io/onboarding
I don't trust anyone, haha.
You don't need to trust.
Why not? How does it work? Got any diagrams?
This looks pretty tight to be fair, good concept.

