I don't think it has to be. Perhaps the idea of sending keys over email is a bad one, but I still feel we can do something to take advantage of existing authentication methods to onboard a lot more people, while STILL exposing people to the idea of keys, how they work and all that this entails.