I don’t see what you could do that the attacker couldn’t do after it’s revoked.
Discussion
yeah nothing. just saying we shouldn't cut off an account from its followers after revocation, on the chance that revocation was not done by the user. but don't really have a better solution to offer atm...
I think ultimately you couldn't trust anything from the account after it's compromised, so you would have to convince people to follow your new account out of band somehow.
For me I had time to announce my new pubkey after my secret key leaked, it would have been nice if I could freeze the old account afterwards.