I think because these are called Npub and Nsec in the first place. If it had been username and password to begin with, there would likely be less confusion.
However, you point out the critical difference: it can't be changed and restored. As with Bitcoin, one must re-learn to take responsibility.