I don't know a lot, just a vague sense of what this entails. But do you know if there's any defense against leaked private keys? Sounds dumb as I write it, but maybe some sort of key rotation scheme combined with quick deletion?
My reason for wondering is that one of the big worries of using DMs is that I used my private keys in various apps recklessly early on (no signing extensions, coracle leak, etc)