FWIW, keygen's deprecation isn't a rejection of client-side encryption: it's a rejection of the design of the keygen feature to address those requirements.
I was curious about that, and that seems a fair reason, but it doesn't show much interest in client-side encryption if it has been rejected without favoring some new proposal.
