Most users probably shouldn't even be completely trusting signing extensions.
Try to practice reasonably good key hygiene (to develop a sort of muscle memory); but, until better standards become available, it's best to just assume your nsec has already been compromised, continue having fun experimenting with Nostr while being careful not to count on anything important to be kept secure, and just know that someday (hopefully not too far off) you'll likely be abandoning your current nsec(s) for new ones better secured by the new standards.