I am surprised that more NSLs have not been leaked or "hacked".

Just store the NSLs next to your user data so that when it gets stolen and published then your NSL is published as well.