Anything that stores your nsec on a private server is a huge red flag, if anything ever offers to do that, turn it down and run