There have been some things, slow hacks, that make me believe even those keys could be compromised. We built a better tool for key changes : https://keys.thecrazygm.com/

But changing just the recovery account is like, the minimum at this point!