So, Coracle may have exposed my nsec, but there's no way to find out. I'm thinking I'll spin up a new nsec when I have a real Internet connection again. Which, fingers crossed, will happen this week.
You can change your nsec but keep the old npub?
No, npub is linked to one nsec only.