Could apps implement NIP-46 locally? The key bunker could be isolated from the rest of the app for security, and use a tiny local relay for passing signing messages.
NIP-07 feels somewhat unnatural for mobile apps, as it is really written for browsers.