For the most part, yeah - if your nsec is compromised, you’re S.O.L.

Some very clever devs have been working on things like “nsec bunker” which (if I understand correctly) uses your nsec to authorize additional keypairs to sign events “as you”, with the idea that you’ll want to have multiple digital identities for different purposes.

It’s very very early