On my case the user has to specifically save is profile to disk and then extract/save the nsec to elsewhere. Most users will never do this, they just visit with a instantly created account to play around and never use it again.