You don't have to. That is just a note for the recipient because in the app, anyone can use any npub to send Ecash. I could spam poeple by simply using your npub.

We have to work on a secure solution for importing the users private key instead of using the npub.