I thought the same thing, seems pretty straightforward, and like a feature for its simplicity.

From a user perspective I would still hope for an one time login key derivation feature for less risky testing of new clients eventually.

Personal web of trust seems sensible and relevant regardless. Difficult to infiltrate an entire specific group of nsecs at once.