Lol. 
I think a second more secure canary npub displayed on your primary profile (for which you haven’t put the nsec into any clients) + NIP05 where you control the domain is plenty
(… I should set up my canary npub)