There's something that worried me about having only a private key to login at #nostr and not having a way to recover from a leak or invasion. I mean, how can we feel safe if we know that a potential leak of our key will permanent steal our content forever? There's no password change /key change. Today we have several apps that we can use with this protocol plus web browser apps, several browser vendors, extensions, browsers with less security, etc... The ways you can loose your key to an hacker are far way more and faster, than the ways users can learn how to avoid them.

Am I missing something here? Is there a way to associate account to a new private key if it had been compromised?

What are the good practices to avoid this preoccupation?