So Im still relatively new to this but appears that mobile apps still directly use the nsec as the sign in method rather than allowing an extension (specifically primal and amethyst) are they that behind or am I just missing something basic?