No, you would white list in a non-forgeable way what your next npub will be so when your key is compromised you can move to it regardless of what the attacker does

NIP-41 if you want the whole thing