I don't think it is puzzling.
1. Users understand passwords. While password stuffing is a concern, almost nobody actually makes product decisions based on rational security analysis.
2. Only a small number of users are concerned about centralized login via OpenID Connect. The privacy and account access weaknesses of logging in with Google or Facebook aren't concerns for the huge majority of users.
3. Creating and maintaining a key pair is less ergonomic than creating and maintaining a password.
#3 is now different for people who are regularly using blockchain systems so it doesn't surprise me that uptake is larger than now than in the past. More people have a Coinbase account than use PGP. But I am not convinced that people actually care enough to swap if they aren't already ideologically aligned with blockchain technology.