At this point in development I think that may be the reasonable approach. However going forward when people invest large amounts of energy into a nostr identity, we must adopt better private key security practices, such as hardware wallets do for “crypto”. However this may resign this platform for a small subset until the public can become educated on the subject, and development has been furthered on the platform.