Key management is difficult for us nerds.

It's impossible for normies.

A friend has just lost all of his Bitcoins by storing his backup phrases on LastPass with a weak master password. (Which was, of course, routinely hacked.)

This needs to be addressed. Is it too much to expect people to manage and secure their own keys? What could be done to help witout compromising decentralization?