Unfortunately that’s true for many, and don’t get me started about random web extensions, that store your nsec in plain text in browser storage