Add a way to publish GPG keys, that can't be changed without a revocation cert?
That way, hacked accounts can regain easily.
Are hacked accounts that much of a problem? Also, if someone's account was hacked it's probably because they didn't practice good security procedures and won't know how to use GPG either.