Fair take. I was trying to judge if what we have is already significant.
My nsec is a slut. She's been in every client. I cannot undo that and I can't revoke it and roll a new one without losing a substantial audience. And it's been two years now and all the proposals around this issue have stalled. For me it is too late, but for new people joining nostr I want them to have the ability to have secure keys. Maybe this can be done in nostr still.
Clients authenticating relays could also probably be done in nostr, albeit a lot messier.
When I think about the paths we have to take to solve these things I get overwhelmed.