Yeah we tried to avoid touching the private key. This is the best we came up with... 6 months ago or so.

Since then we pretty much rewrote the whole thing, including the log in. The new version just asks your extension to sign an event, but the event never gets sent to relays.

Coming very soon.