Yes, security is not a huge concern in the beginning. Nostr has a learning curve and we should optimize for ease of initial use over security or risk losing everyone in the process. Clients like primal and Damus are better starting points and work fine already.