It is correct that it is bad practice to paste an nsec, but a lot of nostr services allow it. The login DOES support "login with extension" which is far preferr

It is correct that it is bad practice to paste an nsec, but a lot of nostr services allow it. The login DOES support "login with extension" which is far preferred and much safer. Your private key is stored in a browser plugin and is not transmitted. Experienced Nostr users will understand this, but I totally agree with your point about making it easier for non-nostr users. Also, they should (at least) strongly encourage people to use a browser extension / wallet instead of pasting their nsec, and provide a guide on how to do that and why.