I really like the UX flow of receiving verification codes via nostr DMs. As long as your nsec isn’t powned