Isn’t the catch that you have to trust every app that takes your nsec?