I am developing android apps on my very personal computer.
Securing the keystore to sign android apps seems to me to be overkill. Securing is usally a pain, so I would apply it only when I get any realistic advantage. The android docs only talk about other users on the same computer, but that is not valid in my case.
Is there any rational need to secure a keystore on a secured personal machine?
Is there any rational need to use strong password on a keystore on a secured personal machine?
If you can be sure, that no one, neither online nor offline, will ever be able to access your keystore file, then there is no need.