Normie-friendly onboarding and secure key handling aren't mutually exclusive. Amber can be surfaced in the onboarding flow with a guided setup.

Most users will follow a clear prompt.

The risk with local nsec is that by the time someone understands why it matters, their key has already been in app storage for months.