So if someone gets my nsec, they can access my nostr, post as me, etc... BUT they can't block me out, either, or change my password, etc, like on FB, Twitter, etc... So it'll look like I am a schizophrenic and you'd never know if it's actually me or the theif...

What about nsec creation with 3 keys? Like a multi-sig? That way you could use 1 to paste into apps, etc, but if 1 gets compromised, you could unlock or move your account somehow with the other two?

Not a dev, just thinking about NOSTR, lol.