Did you sign up through the nsec app itself, or through the oauth signup flow from another app?
Asking for new kind is probably due to app requesting to sign something right after you sign in. The other million permissions should be just one - connect to the app (this could probably be avoided, I could bundle it into create account button itself). Browser permission is a must, unfortunately.
If you have any ideas on how to improve it I'd be very happy.