I feel you 100%. Pasting your main nsec into any app feels wrong.

It basically goes against everything we learn in Bitcoin/Nostr security.

The devs are definitely aware that external signers (like Amber) are the gold standard. But since White Noise is building this complex MLS encryption layer on top, integration seems to be a bit trickier than with standard clients right now.

My honest take: Just treat it as experimental for now. I wouldn't use my high-value main identity. Generate a fresh 'burner key' to test the app. That way you can play with the tech without sweating about your main account.

But to get a definitive answer on the roadmap, let's ask the experts directly: