Why trust Amber with nsec? What's the diff between them and a client?
It's an open source app whose devs can be contacted here for any questions. Though most nostr clients are the same... But it's some kind of way to centralize your nsec and not insert it everytime in each client. Same with the browser signing extensions.