Yes, it’s not that they don’t exist, but more that the burden is on the user to be aware of them, implement consistently on all devices and perform a degree of maintenance. Generally, speaking about users in aggregate, that is less conducive to good security practices in the long run than one nice, maintained piece of software with multiple clients and a team keeping sync running well. There’s a meta-affordance to consider, if you will.
