Really simple - you generate your own private key - the nsec. That is the core of a ‘digital self’ that has been largely missing in the digital platform architecture until it was introduced by bitcoin. It’s now the same for nostr - nobody controls your npub- you do.