I am starting to think MLS/Marmot needs to be a Signer app, not a Nostr client.
Clients just talk to the signer to encrypt/decrypt without ever having view or control of the inner secrets and ratche...
The issue with that is requiring another app/piece of software is not going to go well with a lot of people.
1