If they have your nsec, they control your account, they can post as you, read your DM, etc. Not your keys, not your identity.