the super-app is probably Spring, the nostr-browser, you can access any nostr app and also verify signatures before signing, like using an extension sign up method where the client holds no keys 

 you have my attention! I'll give it a try thanks mate