you are understanding the concepts. your nsec is yours alone. any client can accept your nsec and it will port over everything, as it is saved to your profile on the relays. guard your nsec as theres no retrieval and if it gets out, the account is compromised so be thoughtful where you use it.

a neat concept on this is pick a new client and copy my npub and paste it in, you can receive everything i see