Why most important?

Btw, it's a quite dangerous NIP, a bugged or malicious client can definitively nuke a your profile just using a remote signer. Scary.

I would at least add a delay to the final action (e.g. 24 hours) and a mechanism to undo the request.