It depends how you use your account. I'd say browser extensions like #alby are fine for most. #Amber on android serves the same purpose for android apps, but is more private (no 3rd party account). The idea is to only paste your secret key into one trusted place, and let every other app ask that app to sign your events for broadcast.