Thank you all for your patience 🙏
So browser extension is safer to use than putting nsec directly in client, because the author of the extension can not access your key (why not? We are trusting them to not put a back door in their extension and access my nsec?)
Versus putting the nsec in the client which is less safe. (author of the client is less trustworthy than the author of the browser extension?)
It's all software, so aren't we trusting someone in each case?