This conversation has been going on since zapping began.
It’s very much a “we aren’t there yet” and “doing the best with what we have” situation.
Eventually the standard should be non-custodial but for now it’s the simplest (1 minute setup) non-KYC implementation that works.
Newcomers are already facing a “boomer experience” when they first come to Nostr.
Eventually it should all become streamlined to normalize best practices.