Always assume not being compromised unless proven otherwise.

Even if being compromised you can always post and refer to the new npub. (Not sure if the hacker could stop it or making spam notes to force people block it)

Then you may need 1-2 web of trust npub to verify you in physical world.

In case of lost the nsec it will be worse but also not the end of the world

Not sure if I am correct

#asknostr