A natural consequence of server admins disabling ssh agent forwarding.

All these “security truisms” tend to ignore the real world. When you remove features, people will work around it in a less secure way.

Oh boy... I need to step out into the wilderness more :-D

A result of people not understanding how public/private keys work. They just want it to work, and copy everything over to get what they want done.

These same people probably also joke about the marketing folks down the hall leaving post-it notes with their password on their monitor.

Security is the first casualty in the battle for convenience.

Urk. Wow.

The bigger issue is "Don't copy a private key. Ever. Period."

How would you even do this? Don't the various private key containers make this quite difficult?

It is just plain text in linux. Nothing hard to copy about it