Which is in turn why for convenience, security is a bad thing, making people who do not think about threat models in their sleep opt out.

Problem is striking the right balance, and auto-forwarding your agent to foreign machines is not the right balance. At least not without being able to filter and approve individual signing requests.