Depends on a client! After all, NWC string is credential to access your sats (within given budget). Be cautious to whom or what app you're giving it to