That's it! If all your apps can delegate signing to Amber (or an equivalent), then the user never has to handle their nsec. And if they do, Amber can make it super clear what the risks are.