Yes, and anyways, you have the option to set a monthly budget while creating the connection string on your wallet service page, so I feel you're not giving complete control of funds to the client app. On Nostr Pay, your secret is stored in a secure storage component on your mobile device, so that's safe as well.