There is also no way to recover control of a compromised nsec. It's a trade-off.
yeah, we could talk about how there is mostly no way to stop other people reading who you are writing DMs to also, a problem that could be solved with auth and paid relays but don't tell fiatjaf about it