My biggest gripe with Nostr for now is indeed the need to submit your private key to sign in to apps. I haven’t followed Nostr development closely but why isn’t message signing the one and only way to log in?