I am concerned. How does nostr protect your account if you can log in w/ a public key, as on snort.social (nsec, npub, nip-05, hex private key)? Does this mean I can log in into anyones account just using a public key? What am I missing here?