They are so late.

It seems like these apps are going to try to let people assum keys for the nostr protocol but they also seem like they intend to have a copy of your private key ,, this would give them access to all your private DMs and other items signed by your security key.. and access to the DMs I may have with those users without needing by my security key.. hmm..