Why are they generating new GPG keypairs for every identity? This is an honest question. I've been curious if there are any benefits to having multiple keypairs over just one keypair and multiple uids.

Also IMO the proper way to use GPG is to generate the keys on an offline machine and then move the private key to a physical token.