Some nostr apps already force you to add a password along with your nsec, that way if you leak your nsec or the client get compromised your data is still encrypted.