A way to protect from this threat is to never reuse addresses - when there's no outgoing transactions the public key hasn't yet been revealed.

I'm not sure whether this threat would allow to steal from lightning channels though. The funding transaction does reveal public keys. But perhaps ones created with taproot and Shnorr signatures would be better protected. Need an expert to voice in on this.