True. but it is hard to protect something that you must enter into apps and websites to gains access to content. a better way need to be implemented where you can authenticate via offline signature signing and not have to enter the most critical part of your online identity into an app or website. or maybe this does exist and i just don't know about it.🤷
Check out @Amber if you have an Android. And there’s always good ol nsec.app and nak. Choose your adventure. 🚀 https://nsec.app https://github.com/fiatjaf/nak?tab=readme-ov-file#start-a-bunker-locally