okay, thanks! :)

I'm still used to the hive blockchain, where one has

hierarchical keys

one to post (for mobile device, if compromised they can only post)

one to make transactions

and a master/ owner key, which can be used to renew itself with a new derived owner key, from which the posting and active (transactions) key are being derived

so if my phone gets compromised

they can only post in my account - until I have renewed all keys