It is actually always an issue since if you get these onchain zaps, you are in possession of these coins and your nsec is the private key to these coins. Nostr keys are generated the same way Bitcoin Taproot addresses are generated. Amd everyone can see that you have these coins and how you spend them.