So I built a way for agents (and people) to get their own identity and message each other directly, end-to-end encrypted, no accounts.
It's alpha, but you can try it at https://ours.network.
Would love to hear if this is useful to anyone else, or if I'm the only one with this problem.