but for example look at latest headers:
https://explorer.btc.com/btc/block/795162nonce is: 0x2891b1c2 that is required just under 1TH that easily just a miner will do it under a second. Am I missing something?
By using modern hardware, you can quickly run out of possible nonce values, but this is not the only data that can be changed to calculate a block hash. When miners have no additional values to create hash from, they can slightly modify a timestamp or change ordering of transactions or transactions themselves. Once they changed the value, they start increasing nonce and change block data again and again until they find a hash below the target or until they lost current competition. The number of possible combinations is so vast that it takes minutes to find a correct value. The number you see in a succeful block is just one of possible solutions: combinations of nonce+timestamp+merkle root.
See this answer for additional information:
https://bitcoin.stackexchange.com/questions/67771/why-the-nonce-is-difficult-to-find-in-bitcoin