How else would it work? It is listening for events to sign. That's not insecure. It is a necessary layer of obfuscation, IMO. Wisp is pretty much entirely vibecode. I like utxo and wisp, but I'm not going to trust ANYONE'S vibecoded slop with my nsec. I value that more than my stack.

https://blossom.syb.lol/a8b428f2455cb5b33ce61b061cd86b0d2fdf6541f938f0e571567c3a6a5381c8.html

To confirm that the event_id at the link matches the nevent in the screenshot: $ nak encode nevent cce3ad3583968ccba5e47ed92296343aa2c9aaf7f8267455986f616358679fbe