yes, web clients are bad mkay, only use alby/nos2x/amber
all good client devs should just remove in-app signing, period nostr:npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr *nudge*
Discussion
also, my conservative instinct about using clients has been vidicated repeatedly
losing your keys is just the tip of teh iceberg... having your follow lists and relay lists clobbered is another problem that comes up