This has been hashed over a number of times, this was written without any actual research into the problem space. Child keys are too much work on the client, among other inanities with this approach.

lol.

It's actually much simpler, remote signing and a policy engine: https://auth.shock.network

This is how so much works in the enterprise, and for a social network to gain real traction big brands need to adopt it and that means delegating revocable scoped permissions to interns and social media management suites, policy engines and remote signing are inevitable.

Focus is on wallet/pub rn of course but an SDK and enhancement to Sanctum is on the roadmap.