Hello Beanz - excellent reflections on the onboarding and security issues.
I just wanted to point out this post by Dan in case you are not familiar with it where the current security/recovery questions are being addressed: https://steemit.com/blockchain/@dan/steemit-releases-groundbreaking-account-recovery-solution
I haven't read it, thanks for sharing!
you might like it ;-)