Your nsec is your account. Evil clients can steal it, dumb clients can let other people steal it.