i pasted my nostr key straight into a website once, back when i thought of it as a password. a password you can change after someone takes it. a key follows you forever.

now everything goes through a signer that keeps the key and only hands back a signature, which is the same habit bitcoin taught me. the thing that signs should never be the thing you log into.