Your nsec must be somewhere to be used to sign messages. But it would be a lot safer if it was only in one app instead in any single client you're using.