Let`s say you setup a multi sig wallet or you setup a QT wallet and set a passphrase for everytime you`ll send coins. So these are pretty secure options right?
Sure.
In the case of a passphrase, the wallet will use that to encrypt your private keys. That way, if someone gains access to your computer while you aren't around, or if someone is able to take a copy of your wallet files, they won't be able to decrypt your private keys and use them without first figuring out your passphrase.
But what if someone gets your private key?
While it is still encrypted with your passphrase? Then they won't be able to use it until they figure out the correct passphrase to decrypt it (I hope you chose a strong passphrase).
If you are somehow so careless that they get your UNENCRYPTED private key, then they don't need the passphrase anymore, since the key is already unencrypted.
then can still just import that in another wallet and send your balance to another address right?
Once they have access to your unencrypted private key, they have access to your bitcoins.
If you don't have exclusive access to your private keys, then you don't have any bitcoins.
so all those multisigs, passwords and passphrases are good within that particular wallet brand like QT or electrum.
The passphrases are good for encrypting your private keys.
MultiSig is reduces your risk even more.
With a MultiSig address, I can require, for example, that 3 out of 7 private keys be necessary to spend the bitcoins. Then I can encrypt each private key with a different passphrase and store it in a different location. Now if a thief gains access to one or two of my private keys, they still can't spend the bitcoins. If 3 or 4 of my private keys are destroyed in a fire, flood, earthquake, tornado, hurricane, etc, then I can still gain access to my own bitcoins with 3 of the remaining keys. If a thief gains access to 3 (or more) of my private keys, then they still need to figure out three different passphrases. During the time when they are trying to figure out the passphrases, if I become aware that they have the encrypted keys, I can just send my bitcoins to a new address and they won't be able to touch them.
Am I getting this right?
I don't know. Are you?