technically the likelihood of a mastodon person to talk / interact / get data from a nostr person is lesser than than the other way round so as long as my nsec is secure i am fine. i practice safe nsec. hehe
Your nsec wouldn’t be compromised. The only risk is to the corresponding ActivityPub ID on the other end.