hopefully damus (npub18m7…q955) or primal (npub12vk…pugg) are working on OAuth so in the future we can just use them to authenticate an nsec.
for the time being, sending an OTP to your DM is the most secure / private way to use nostr as a login mechanism