This is why I only use apps that let me use a signing app, no nsec pasting. At least the attack surface is lessened that way.
Discussion
Yeah definitely the way to go for now 👍
But I really hope we can do better.
I've worked a support for Internet and SAAS companies. Without any way to recover accounts it limits Nostr's use for a majority of people I think.
Key management is not obvious, and most people just don't understand or care enough.
If we can get at least a decent tech stack for all the people that value their personal sovereignty would be a good start. Let's hope it can be done on nostr. If not we'll come up with something else ✌️