I don't know if this is an issue, but...
@Amber is it possible for a nip46 client to request the actual nsec from Amber? If it does, I hope every bell and whistle goes off and amber forces you to say "yes, I want to send my nsec to the client" at least twice.