> "They haven't done it yet because it's hard. Really hard."

How "hard" is it though?

The following seems straightforward to me:

- Generate a pgp key pair

- protect private key with a E2E password ("if you forget your E2E password, all your DMs will be lost")

- store public key and encrypted private key in the Twitter account

- download private key to each device/browser session the user logs in to, have them enter the E2E password to decrypt it

- make public key of any user available to anyone they send message to

Why would this not work?