But wait there's more...

Let's talk insecure web front ends- think a fake client that generates you a private key OR you paste your private key without a signing tool and now someone else has your private key as well

Let's say it's the bad actor with malicious intent... and they have your photos. Photos you never consented to. Now they can not only post non consensual photos, they can sign for them as if they are you

Making it look like you posted those photos...