the super-app is probably Spring, the nostr-browser, you can access any nostr app and also verify signatures before signing, like using an extension sign up method where the client holds no keys