This.
To any devs, I will never again use any app that requires my nsec for login. I'm using #amber so multiple login types are supported. There is no excuse when the tools have been around this long.
To difficult you say? You are the dev, build the libraries and APIs instead of the 1000th nostr twitter clone.
Influencers and big accounts need to knock off recommending these apps too.