i think you are right.
And with SPS we have a strong Tool.
But i always think, the average Internet user does not want to have a long and heavy password.
We have the advantage of easy usernames to other blockchains.
Apart from keychain, we also need other options for end users. So the entry is easy and fun.
Maybe a hardware wallet or soft key application ( give the different keys, different permissions and generate a new key, like a active key can transver only 5sbd in 24h with a easy passwort) .
I think with SPS we can solve those Problem and Steem (WEB 3.0) will be a huge success.