Lol I'm a dumbass.

I spun up that npub a few months ago just to publicly release the nsec.

So literally anyone on nostr who read my note can control that account.