This is an issue, you can’t recover/change a lost or compromised key, but this is really the same sort of responsibility as with self custody of Bitcoin. Back up and store the private key securely and don’t share it with anyone. Also be careful when testing new Nostr apps, in particular don’t enter the key directly into web applications (there are Nostr signing extensions to avoid the need for this).