But for a hacker it doesnt matter there is a fee. If someone use the active key on the wrong place, there get fucked.

Opt in with owner key or a New "Instant power down key" ( that needs the owner key to be created) would be good and maybe some whitelist for tranfer.