Just now tried @npub1wnwwcv0a8wx0m9stck34ajlwhzuua68ts8mw3kjvspn42dcfyjxs4n95l8 with @npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm integration and am quite impressed. Took me some time to find the right place to put my nostr secret in the Alby extension but after that it went really smooth.

Keeping the secret in the browser but NOT in the web page makes it reasonably secure. Alby just provides a NIP 07 (https://github.com/nostr-protocol/nips/blob/master/07.md) API to sign/encrypt/decrypt messages and that is all Iris needs to operate while never seeing the secret.