Alby Hub is different than the browser plug-in. Alby Hub is for running a Lightning Node.

You give your nsec to the browser extension so that you don't have to give it to each website. Nothing can sign for you with only your npub.