42N3 on Nostr: as I wrote this is what Telegram calls a "mini app". A Web view with integrated APIs ...

as I wrote this is what Telegram calls a "mini app". A Web view with integrated APIs to access Telegram services. What is integrated here is not obvious. One could just post a link to https://nostrx.xyz/ in Telegram and call this "integration".
And that it runs as mini app instead raises concerns. Because if you start a Telegram mini App, the Nostrx Bot running on some other server is involved. It may see your Telegram user account and connect that to your npub. Entering your nsec even might involve it being processed on the server that runs the bot.
So I asked for clarification.