The first mistake is thinking this is essential.
Yesterday i tried primal on android, i copied my nsec from amber, 10 minutes later i pasted the clipboard contents in the search box of you tube.... 😭...... Mistakes happens. It's essential
This can be solved, or at least mitigated, using the ncryptsec. More client should support it.
I'd argue that the first mistake was when you created the protocol without this already solved .