I can’t in good conscience onboard normies until there’s a better answer than “and then you paste your private key into yet another app and hope it’s not leaked or stolen”. We need NIP07 for native apps and nsecbunker is cool but too complicated for most people.