Keys are a huge problem.
One solution is a NIP for designating a backup NPUB, as soon as you create your original one. This designation must be immutable.
Then, if NPUB 1 is breached, user presses the big red button to engage NPUB2. Forming the equivalent of a 301 redirect on Nostr.
Since the NPUB 2 designation was made before the hijack, it doesn't matter if a hijacker has access to NPUB 1. The original user can still press big red button, migrating to NPUB 2 which hijacker can't control.
