Nostr is not known for a focus on code quality. I think he's confusing a lack of attackers with strength.
Specifically for nsec entropy it's somewhat easy to so this correctly on a modern phone. And relays are redundant and no funds are lost if they go down due to some DoS, sure. And having your wallet drained to an NWC bug, might be fine if there's not much in it. But the latter is another example of low stakes.
