I also want to say regarding your last episode. I totally agree re everything you said about EC keys. But nip05 can help a bit here. 

If your key gets leaked, yes you will burn this npub, but you can move your nip05 verification.

I don't know if people look that closely, most people are just getting verified by these giant services.

But for our own domains runners like you and I, it's maybe a guardrail.