There are browser extensions that hold your nsec, and sign your events, so you don't have to transmit your nsec to every web client. It is the preferred/secure way of using Nostr web clients.