Given that any application running as the logged in user will have read access to that user's
~/.ssh folder, it seems trivial for the application to copy that user's private key and send it over the network.
Is maintaining SSH keys under
~/.ssh considered unsafe for this reason? If so, what is the recommended way to manage SSH keys?