Everyone is reminded to be extremely careful, especially if you have your recovery account set to @steem. Those accounts are not recoverable if compromised and the entire wallet will be permanently lost if the keys are changed. Should the target remain as Active Key only, this is the best possible outcome as that key can simply be regenerated (but watch for active authority changes).