Who holds the keys to the keys? You do. That's the point, not the flaw.
A recovery phrase is the most sovereign backup there is. Generated on device, never sent anywhere, no company can reset it or hand it back. Lose the hardware, restore from the words. The catch is just the other side of that, nobody can take it from you, nobody can recover it for you either. That's the deal with real self custody.
Though that's not the whole story. Nostr opens a door to social recovery, you shard the seed out to people you trust, encrypted to them, and a threshold of them can help you rebuild it. No custodian, no middleman, just your web of trust doing the work. Early days, but it's the kind of problem I want to solve.
