Web2 is not web3

This is so right. Having asymmetric encryption is a feature, not a bug. It just takes slightly more complex mechanisms like public/private key pairs. The fact that HIVE has different key pairs with increasing levels of authority only highlights the importance core devs placed on developing tools for users to keep our information safe.

Self-custody is a different beast than the 4 digit passcode used to unlock your phone.