Most of them do.. 😒 it’s stored locally, but there’s no real way to check that. Someone could easily make a malicious client and secretly harvest nsecs and store them for later use.. 🥸
Discussion
I'm not very smart but I am guessing that is not the optimum tack for developing a nostr app.