I’ll add: the default behavior should be the right thing for most users, assuming it won’t be disastrous for a significant minority of other users. The right t

I’ll add: the default behavior should be the right thing for most users, assuming it won’t be disastrous for a significant minority of other users. The right thing for most users is to have an encrypted backup of the keychain that’s part of the rest of the computer backup. In fact, for most users, it could easily be disastrous not to. Also, migrations to new devices are a fact of life. It should be possible to migrate to a new device and bring your keychain along.