Hi - I can't comment exactly what would work best in your case, but I agree on not just shoveling your nsec into random websites.

The alby approach is far better. I recommend you run your own node. In my case, I run a start9 server and node and with a few clicks I got connected to my node. So... I don't think (besides the Alby SW) there is much to trust. I must admit I was lazy and didn't check if the SW is open source on github, which I recommend doing as well.