Im quoting you James as you have laid out a post that has the most elements for my questions. Thanks.

Ok been reading about this 'darknxt' in a few posts. Read some rather agitated post's wanting to ban them and others saying its accounts that have not sent nxt at all. Righteo got that when I tried to get my public key (local get public key)- didn't have one, but sent a nxt got a public key wonderful. I feel so secure.  

Enough background im curious. pubkey, the one I log in and out with I take it yes? I mean if I fly over to any one else running nxt say hi and bash my password in I would get my account? Is this correct? I am going to assume this the case and ask why it is insecure until I send a nxt so making a public key?

I am totally un-technical so im going to take a stab at trying to understand this. All accounts are in the blockchain. Unless you're account has a public id in the blockchain it has a vastly inferior encryption method (ie need to make a alias, transaction or mine a block to get this public id). This in beginning or middle even was never explained and im only hearing this recently (well as far as posts keep expanding rapidly). So was this a bug or a fault found, because it sounds like it. I am going to assume this is an attempt to stop people trying to mine/crack the blockchain (which is d/l by anybody) and was added in after the release? Because this sudden need for this makes it seem so. But..

As i say, I am not technical so if anyone could explain it in simple, start, why, because, manner I would be grateful, as to a layman when I read posts about people wanting to ban accounts that have made no transactions and not reading about any valid reasons to do so makes me question even more this concept.