A Reticulum destination is a hash of a public key, so the address and the identity are the same object. That makes rotation awkward. There is no obvious path from a compromised key to the same reachable name. Lose the identity file and the address is gone.