How to rely on the “badges.page” site? While we should enter our private key?

It tastes like a “Manipulator-in-The-Middle”. I will recommend NIP-07!

https://github.com/nostr-protocol/nips/blob/master/07.md