Once I’m on a site I’m happy to “authorise forever” ie. Snort or Iris or Badges …
Signing happens on client side if you’re publishing events / notes - so it’s safer than sticking it in the browser directly.
Some people think extensions still aren’t that safe and that remote signer is safer - but remote signing isn’t available yet I don’t think so it’s just a better option than inputting directly to the website.