So how do I avoid typing (copy pasting) my nsec when on mobile if I want to, for example, log onto badges.page?

You nostriches have succeeded in making me (rightfully) paranoid about this sort of stuff.