I gave up on using PGP for personal communications ages ago (even ones where signing would actually be nice and not just a waste of time), but I still appreciat

I gave up on using PGP for personal communications ages ago (even ones where signing would actually be nice and not just a waste of time), but I still appreciate services that do this. For example, my repository hosting (sourcehut, https://git.sr.ht https://git.sr.ht) and related services sign emails. I could know nothing about their key, key management, levels of trust, etc. just that I hit trust the first time (I'm perfectly okay with a TOFU model here) and now I throw away any emails that don't have a green tick next to them in the "Signature" field. Email software could make this dead simple without requiring that the user know anything about the web of trust, regardless of how complicated PGP is under the hood. For most users, even webmail users, this would be good enough.