If a bad guy has your password, you can lose access to your account

If a bad guy has your nsec, you always still have access to your account (but they do too)