Nsec are a real problem.

They should expire, also, to have some privacy a new npub for each contact is needed.

You can not trust an nsec long term.

What if you get hacked? How to recover your identy/sats?