I can see that npub and nsec might not be necessary for users who don't want to deal with it, but they should still be generated so that the account is secure from people who try to clone the account on other devices with the username/password.