even if a keychain was somehow secure and restricted access to that program only, you are only a memory dump away from getting the key

and since it’s same user that can be done with no privileges

it should be viewed as a way to delegate encryption at rest of secrets to the OS, nothing else

but you really should just do FDE