Likewise. It's one of the only things that concerns me about recommending #nostr
It's really hard to explain to laymen how your nsec is similar to a wallet key. It can't be discovered from any other information.
I notice some apps are now insisting you use a key escrow extension to combat this, but that only kicks the can down the road.