Is nsec on card encrypted or anyone with NFC tag can use nsec?

If not encrypted I wonder if you could encrypt with keys of decoy account so that NFC alone does not expose nsec and you needed to be in decoy account already to access hidden NFC account 🤔