Thank you! It uses NIP-46 so it has to sign auth events as part of the flow. There's no alternative. Seems like something browser extensions could improve.