The propper answer is that we don't paste private keys into websites. Or wear a ledger around the neck.