Nuh on Nostr: Initially I thought ugh asking people for email to notify them if someone is trying ...

Initially I thought ugh asking people for email to notify them if someone is trying to steal their identity would give the wrong impression and add friction... But if you embrace that you start users at Level One, then you don't actually care, you can just let them sign in with passkeys only, and worry about notifications when they opt in downloading their recovery key at all. Then you can offer them to download an app that watches the chain once a day and notify them if they need to react.