An npub/nsec is no different to the end user than username/password, except you can't recover or change your password. Why is this difficult to explain, because it looks worse than a password?