💯

What often bother me (and is maybe even worse) that if I decline a signing request, often nothing happens or things are just freezed.

"What's the point of having cryptographic signatures if I can only uses them in "sign everything" mode?"

With asking this question, you also state / assume that the user will fully distrust the client? Which is a good and fair point to start with imo :) but over time, your client could gain trust