I have always used a Blowfish encrypted keystore, simply because it is nontrivial for a GUI desktop user to create a gpg key. Its not hard actually, and would improve UX drastically, automating this with kdialog or something. Currently I just suppose 90% of users will use Blowfish.