I think that that's my bottom line point: tradeoffs. If you have secrets, they have to be kept safe. Whether or not you do it yourself or you outsource it, directly or indirectly, merely shifts the burden, but the burden is still there. You may just not be exposed to it in the same way and you'll have different friction.

You'll even probably still have a seed and key derivation as continuous secure random without wrapping is a security risk too that a normie won't be able to defend against.

I guess what they really mean is: we don't have a BIP-39 implementation.