Was thinking about this, but I'd prefer the key app to not have any networking capabilities. It could still do remote signing, if the local relay gets the nsecbunker events.

"...to securely compartmentalize your digital life", similar to QubesOS?

Relay have a huge attack surface and can easily crash.

A key app must work 100% of time