He’s actually not wrong though, key generation and usage sucked! (Past tense).
You had to create your private key in app, enter the private key into the app to sign in with write functionality, or enter it into a browser extension.
Nsec bunker is the right direction, but it costs and runs on a singular relay which is a poor dependency.
BUT - FROSTR (NOSTR using FROST crypto) will fix this, by being able to (eventually) create keys outside the app, have sub keys with various mod functionality, so the admin key is never entered and can revoke the previous sub-keys at a moments notice.
So, Parker was, and largely is - because FROSTR still has a long way to go - right in the short - medium term.
But medium - long term, he couldn’t be more wrong.