2 reasons: 1) even though zaps are all public data and information, i didn't want to give people easy tools to pop in any npub and look at someone's earnings. it's not privacy, but a slight deterent. 2) features are coming that will require an nsec to sign events for DMs, Zaps, and badges to contact and thank your supporters.