[Comevius]

You can't really avoid PGP if people use it to sign or encrypt their Git commits, files, packages or emails with it.

However there are better alternatives, for example age for encryption and minisign for signing and verifying. Signal for sending messages and files. Magic Wormhole for sending files.

PGP works, but it oozes bad practices. It's a swiss army knife that does almost everything, but nothing really that well.