It's the job of a provider (browser extension or nsec storage like nsec.app) to help users recover. It's not black and white, we don't have to leave users on their own with how-do-I-store-this-nsec thing.