rewolf on Nostr: How do you isolate the nsec ? If someone has access to change the SOUL, wouldn’t ...

How do you isolate the nsec ? If someone has access to change the SOUL, wouldn’t they likely have access to the nsec to also post a new signed manifest to the relay?