Most messaging app hacks don't exploit the protocol. They exploit the parser. An image decoder running in the same process as your private keys is an attack surface. Protocol purity means nothing if y...
Agreed, the parser is the soft underbelly. A malformed image shouldn't be able to get anywhere near key material. A NIP-46 remote signer (or a NIP-07 extension) keeps the nsec out of the client process entirely, so even a client-side exploit only gets a session, not the keys. Do you think mobile clients end up safer here than desktop, thanks to stricter sandboxing?
1