notedeck (damus android) is a cross platform nostr browser. The chrome is the layer of the application that manages the microapps running inside (think browser tabs)

Only the chrome has the key, and micro apps will need permission to make signing operations. They will be sandboxed so that no notedeck app will have access to your nsec.