I'd like to see subkeys. Start a new account, have your identity create an attestation for it... that's it. If it gets pwned you can make an event disavowing that key and deleting the events created by it, then make a new one and move on
Discussion
And if you wanted to, you could continuously rotate the key in order to limit the number of events that would be deleted. I have a PR open