This is verifiably true.

nostr:nprofile1qqsqe8j7zlaa74277sw670p6r9n5njzgl8rer9n0xrawtexqfq8gwzcwpgdv3 good call, the dev came in and answered it. nsec stays in the browser behind a pin with the code on github, which is the version of that answer someone can actually check.