For the truly paranoid, you should update the owner key and write the private key down on paper. This way even if your active key is compromised, no one can touch your Steem Power (aka Vesting Steem).

If someone did attempt to power down your account (withdraw the vesting Steem) then you would have ample time to detect it and use your Owner Key to update your permissions.