There's been some work done to work around this issue. One of the approaches is to keep an always offline "fallback" key that can be used to "lock" an account a

There's been some work done to work around this issue. One of the approaches is to keep an always offline "fallback" key that can be used to "lock" an account and transfer ownership to a new account in the case that a private key is leaked. https://eprint.iacr.org/2021/872 https://eprint.iacr.org/2021/872 This doesn't solve the issue entirely but it does provide a mechanism for recovering in the case of a major attack.