Yes if youre typing in a nsec into a form, then yes. Especially if its a web client and stored into something like local storage. With apps, you can have a bit more security so it depends how its set up.