This. That's all.
Just because an nsec is 32 bytes. Make a second secret key during setup and put it next to the identity nsec, then allow the user to add it as a payment target. Problem solved. Just keep money off my identity please.
Furthermore some identities act on behalf of a company, can be yet another tax complication.
