My vote is for extended keys, something based off HD Wallets:
https://github.com/bitcoin/bips/blob/master/bip-0032.mediawi...
Easy rotation and recovery of individual keys, but you do have to protect your master seed.
Nostr also supports user verification through DNS hostnames.