One thing that has raised a red flag for me about #Nostr is the fact that several applications require users to provide their private key. Needless to say, this is not in line with security best practices, and could put a users data at risk. Am I wrong? Thoughts on that?