It makes sense to work out secure implementations. However, there's nothing wrong with people exploring a range of possibilities. Both can be true at once.
This is why it's good to have multiple social media: if a nostr nsec is compromised, it is easy to verify the new nsec on other social media.