it is not only about "Hackers" it can be also phishing. Think about older Users. I think at the moment we have a more casual user friendly solution.

People send there passworts/keys away in emails.... or dont use Steem Connect/ Keychain.

The active key doesnt should get to much power.

One Solution can be, new power ups can use instant power downs with burn via opt in.

The User can usw both.

And in my opinon it is more important to fix SBD with remove or new code like a DAI copy before something like this changed to fast.