It Just Works™... until you don't want to take the default option. I'm sure your average user would just be SoL if going through this same experience.

Keychain is one of the worst APIs on Apple platforms, with parts that date all the way back to MacOS 9. It's not surprising there are various breaking bugs from decades of low maintenance.