I can see a lot of nostr users getting rekt soon with malicious badges. What could go wrong by pasting your private nsec key in a website? Your account will start posting spam or write atrocities on your behalf. Want your account back, you will have to pay the ransom.