Your nsec wouldn’t be compromised. The only risk is to the corresponding ActivityPub ID on the other end.
i wonder if we could run a personalized version of mostr bridge? but then i guess, that is what ditto is all about anyway