Private key management is not a solved problem. Here's one interesting proposal: https://rumble.com/v6ydm34-decentralized-authentication-is-our-only-hope.html