As long as leaking the nostr master key doesn't give access to each device's private key, it could work.