You do have to rely on the whims of web client devs though. Unless you have one of those extensions that keep your keys secure.
Discussion
as i understand it, having one of those installed is fairly common. and the next most common extension would be a Lightning wallet that does a similar thing for authorising payments for zaps.