Yea and just to be clear, a signing extension keeps your private key locally on your device and signs events without having to expose your nSec to various clients. You should still use a good PW manager like Bitwarden (and even better if you self-host on an umbrel or start9!)