That's definitely a possibility. Then your possibility of leaking your nsec is only when your device is connected and you are actively using Nostr.