Yup. The UX is going to be tricky. In the system I'm building there's a shared-everything KV store that your client publishes to similar to their system. I've got a system worked out for recovering your account in a decentralized way if a trojan exposes your key. However, I think there will be a need for services that help with this.