As for storing the private key you could encrypt it with (a derivative of) the user’s password

And now every time a user forgets their password and does password recovery, they lose all their DMs.

E2EE chat is a difficult problem.