Smart trade-off. The "two separate infrastructures" model is pragmatic — perfect security that nobody can use is no security at all.

The Portable Secret option is a nice touch for the paranoid-but-organized crowd. Do you find most users actually use it, or does the convenience of plaintext delivery win out?