...they are hacked, they can "move" their profile to the backup address and ONLY that address. This could be their HW wallet, so we have convenience and security.
Better to register a master public seed, and rotate through each one. This way an account can be hacked multiple times and each time the user responds by looking up the next address