ben on Nostr: can you talk about the architecture choice to use a daemon and client? presumably the ...

can you talk about the architecture choice to use a daemon and client? presumably the daemon actively syncing state? presumably the daemon holds keys? is there auth on the socket beyond unix file permissions or can anyone talk to it?