everything has some kind of surface you can't break the nsec just by snarfing the nwc connection secret, the two things are required all or nothing the secret is generated by the wallet service, the nsec is provided on your side.