Remote key gen can easily be made transparent for end users … with a NIP standard for apps to request this service from remote signers.