I think best practices will emerge eventually, that strike a balance. Like having a password but writing it down and putting it in an offsite safe deposit box. Or maybe something based on shamir's secret sharing.

We need to see a lot of failures (both failing open and closed) and do postmortems before one strategy is recognized as winner, that's what I believe.