Losing private keys is much more common than losing domains.

Yes, which is why by default, key management is done by your hosting. You log into your host with login/password or whatever mechanism your host supports.

Adding your own emergency rotational key in case your hosting goes rogue is supported, but is a separate thing and not required for normal usage. I'd like this to be more ergonomical though.