I'm not really sure. This identity I use is a test one on Nostr, so at least it doesn't really affect the "secure" identity I use. On the other hand, together with a friend we were reviewing the code on Github, of the plugin itself and we didn't find "anything strange". However, and going back to your question, I can't guarantee that it's 100% secure.