Yes starting a new key seems to be the only choice we have in the event that our private keys are leaked/hacked. I'm sure someone will make this migration process easier, presumably they will create this tool after they get hacked themselves 😂