For individuals/organizations with significant reputational value to safeguard, an offline authentication device + something like NIP26 makes a lot of sense, especially for a platform with no mod-gods to intervene when something goes wrong.