Yes exactly. Where from? Did he detect vulnerability and POSSIBLE leak? Or the full key is it on the open web? The ultimate solution to this problem is still a pre-designated and immutable backup key/acct with a killswitch. New NIP needed. If key/acct is compromised, hit the kill switch to migrate to the new one. Breacher would never hit killswitch since they don't control acct 2. Only the original creator controls it.