These are not the same.

If someone gets hold of your username and password, you contact Twitter Facebook and get it back and kick out the one who stole them.

If someone has access to the nsec its done.