What if clients didn't actually deal with signing and publishing your notes?
What if a client could operate in a mode where it just produced the event template, and you scanned it as a QR code on your phone (which holds your nsec) and then your phone published the signed note?
A bit like a PSBT but for a nostr note.