Yeah sessions should be controlled but are a pretty modern feature. Simply using strong passwords or even hardare OTP would be great. But for sure, a downside.
Transferring private keys is interesting, this is pretty userul, true. signal to this day does not work here for me, so I prefer using it as a messenger, for temporary things. Afaik my matrix experience was better here.