I really like the idea of social key recovery. Leveraging the trust relationships in the web of trust to back up, secure and help recover each other keys. Eg doing frost multisignatures with some trusted npubs (frens) automatically cosigning. In case of key compromise we fall back to the human social layer to recover, invalidate, roll over, attest new sec keys.. That way it could be more safe to allow the mess.