We need a good way to recover your network from key loss / compromise. The only solution I see is to add a recovery key that can redirect the network from old to new npubs.

nostr:npub1sg6plzptd64u62a878hep2kev88swjh3tw00gjsfl8f237lmu63q0uf63m and team already thought of and covered this in AT protocol