Agree somewhat except "don't know, click here to generate one"... I personally don't want Facebook to generate key-pairs. That is even worse then not having privacy.

The private key should never leave the users machine and should definitely not find it's way to one of the worlds biggest eavesdroppers.