Correct.

If you you use Firefox as your browser, you can use Alby's firefox extension to hold your nsec securely. The extension will automatically sign any login stuff for you. It's open-source and works awesome. I would never give another website my nsec. Doing that is only begging for one of them to become nefarious and log/steal/leak your nsec.