they can't do anything at all because your npub has to write (i.e. SIGN) to your nsecBunker for it to do something (like authorize a new key to be able to sign on your behalf)

I can't join a livestream atm; kiddos asleep here so gotta remain 🤫