I agree. Various users will have different risk tolerances and it’s ok if they screw up and leak key. At least in the short term until we have better solutions. Perhaps we could emphasize extensions but offer a nsec login option tucked away, explaining the risks.
Hopefully nsecbunker and things that follow it solve the issue.
I think most users won’t bother with mobile logins at all. I don’t even bother myself 🤷♂️ and that’s a lot of people who will never experience nostr on mobile.