Your private key can still be compromised on NOSTR if not secured properly.

I wonder if there could be something like Multisig for decentralized social media accounts. 2 of 3 required to post and sign, only 1 needed to login. nostr:note1685vw5rn6yfmh7zfc3jnzrcr3ngkdzfrk3c2ax2rkmjhha09fplqn3aml4