Every app can leak it to hackers or outright steal it at will. I'd pretty much not want to have to rotate my key, especially as that's not yet a thing in nostr. So for now, only the nos2x browser extension knows my keys.