you don't mention whats awesome about the proxycommand to go through hosts:

here's what! it uses the intermediate hosts as a tunnel, which means no ssh agent is listening on the hosts (the regular way to do this is ssh -A hostx ssh -A hosty ssh finalhost)

This means no attacker can use your agent while connected.

Additionally, its less cumbersome when its setup.