I use the AKA Profile extension to allow access to my key - but this is "the second level".

Basically, there are roughly three levels of key security:

- Pasting your nsec. (bad)

- Using a browser extension. (good)

- Using a delegation provider like #NsecBunker (very good)

There are many ways to generate a key, really. No need to worry about that - it is much more important to keep the nsec save and secured. Once someone has it, they have your identity. And, so far, it is neigh impossible to "poison" an old account whose nsec was leaked so... that'll be difficult.