powering up is actually the thing that is saving your Hive if your keys get exposed. Who ever gets the keys can't get any of the Hive that is powered up for at least 7 days.
Of course changing the recovery account to someone you trust and can help you is important.
Karen, your recover account is set to 'hive'. Do you actually know the owner of that account? If not, you should set it to someone you can trust to recover or it will be permanently lost should it be phished.
No, I don't know who owns that account. Its not an 'official' Hive.io account. Follow the instructions in this post: https://hive.blog/hive/@arcange/introducing-hive-account-recovery