If not now, when?

Maybe it's not. I'm trusting a Dev either way. The logic for me is that I gave it to Amber and not a bunch of other apps. I figure that reduces the attack surface but nothing is 100%. Ideally, my nsec would have been like my Bitcoin cold seed from the start, but we didn't have that UX back then.