I don't know enough about how nsecbunker works but I believe it's just signing events and sending back the signature. I do agree that pasting an nsec into the browser is less than ideal. however currently logging in with nsec is probably the main way on mobile.