A password manager would make sense. But my concern is from the clients side and verifying events and keeping track of identities

Its the same issue with NIP-26, delegation or driving a key is fine but doing the verification for it takes a lot of work. Not to mention it complicates REQ to relays :(