You can use a browser extension like Alby to manage your private key while using web clients. I think there is also a NIP for remote signing. And you could create a whole range of readonly apps that only need pubkeys