One of the problems to solve is... what if the server does need to know your secret key, because it needs to sign events on your behalf? Well, it turns out we can solve the problem differently with Remote Event Signing (aka Nostr Connect).

You store your secret key in an app, and then authorize third-party apps to sign events through it.