So don't you need like a key and a passphrase? Or a file and a key?

Or is this WIF private key-thing a one-in-all solution? Seems like it is more risky than other methods? the private key is all that is needed?