The key is only necessary as a backup these days. You can share the key from one client to another which works well. As long as the user has a laptop and phone it should be ok unless they lose both.

But yeah it would be nice if the key could be escrowed somewhere for big organisations.