I was thinking about it. Noblebot already does do a lot quite good as it seems, so I was curious.
If I get some sudden inspirations, I will let you know.

Ah, now I have an idea. What if Noblebot would simultaneously to changing the passwort would also just send all the Steem and SBD to himself so that while the account password changing is in process, the money doesn't get stolen? Once the true user reclaims his account and password, all of it can be send back.