This means that support on my daily driver platforms now works without being cumbersome:
Thunderbird on OSX is a bit interesting, but the key is to run
brew install pinentry-mac, and then add these two lines to
$HOME/.gnupg/gpg-agent.conf (remember to restart it):
use-standard-socket pinentry-program /usr/local/bin/pinentry-mac
I've also added a gist (signed with my current GPG key, remember to generate revocation certs, or suffer like I do with multiple lost keys over the years) of my current SSH keys / GPG key, all signed with my current GPG key.
New life with GPG here I come!