well yes, if you leak your private key you will probably get hacked, your wallet can be access using only private key no need for password or json or anything else just that
Yes, but this is not hacking - this is phishing and the only victim is guilty of access to his account. We need to be careful and check site link before using the private key. What about really hacking, there is no computational abilities to hack the blockchain.