In some ways it's even worse than bitcoin key management. At least with bitcoin it's easy enough to move your coins over to a new key if security with one is uncertain. Nostr needs key invalidation/rotation.