If I understand correctly, this competes with the Google login / Facebook login for websites, the advantage being that no third party is involved. However, account recovery will become the website's problem rather than Google's/Facebook's; currently, if someone forgets their Google password, they work it out with Google. If someone loses their nsec then they have to convince the website to transfer their account to a new npub.