Amber with no network permission (even better, on #GrapheneOS) is hands down the best tradeoff between convenience and security for nostr signing. I want the same for desktop.

GM