Hot take: users should have multiple pubkeys that are associated with their profile and they can post from. If one gets rugged, no big deal, just drop it from your kind-[idk yet] and add in a fresh one. Follow lists should be periodically resynced and individual relationships should be individual events.