And i can tell you normal users dont save there keys. With E-Mail there can look again. E-Mail is better with some notice there should change keys.
Security is less important then coustomer expericene.
Edit: or autoinstall Keychain with auto Import keys + Backup download.