You're just trusting them to custody your private key correctly

most of this apps are not even storing it in the keychain

they can't because the hardware doesn't support the curve that we use and the operations needed

so even if they do stuff it in there they're going to stuff it in there as a wrapped encrypted object that they're going to unwrap and use as a raw key