He's not wrong that the repercussions of having your "account hacked" are worse on Nostr. There are trade offs. If my password is leaked or hacked on Twitter, I can deal with a central authority to reset my password and get my account back. If my nsec is leaked, that cat can never go back in the bag. It's leaked for life. Twitter allows you to recover your identity, that they own. Nostr allows you to create a brand new identity that you own.