It's not though. The bunker has to start somewhere. There has to be a "genesis nsec" at the start of the bunker story. And that genesis nsec will be "see-able".

It's fine if the company doesn't mind at least one person seeing (or being ABLE to see) that genesis nsec. Call that person the bunker starter-offer, maybe the person who runs Igloo to generate the very first Frost shards.

That is a huge corporate security issue. It's like giving that person a forever password to your AWS backend.

To be clear I mean relay more in the Flotilla sense, and with it's own pubkey, but further developed. So not your ordinary relay.