This may well be a good thing

Don't get me wrong, I acknowledge and accept that key management and distribution is the hard problem here that has no magical simple solution. Still, there are better and worse ways to approach this problem and gpg just seems like piles upon piles of legacy hacks and outdated assumptions. The fact that its "library" invokes the gpg binary and parses its output really speaks volumes about its architectural qualities.