EXACTLY!
NIP-26, or something like it, is badly needed for non-trivial uses of nostr.
Glad to see that you guys want it, Lyle. You motivated me to push harder on it again.
And no, the main gotchas as NIP-26 stands right now, is that the control the user grants are pretty much all-or-nothing; if a user grants you a delegation token and you misbehave there is no recourse.
I'll write more about this tomorrow.
#[5] in 12 hours