It would be hard to convince everyone that my new account is X ... while the thief would be saying otherwise. I guess we'd need some "once only" note that advertizes a "master" public key for which the private key never is used anywhere. Then this private key could be used to sign a message saying "I am migrating the account to npub___". Everyone then knows it's a genuine migration message...