ERC-8475 proposes ERC-20 Outgoing Window Limits, pairing a per-transfer cap with an aggregate outgoing cap per block window
If a token holder's key is compromised, the cap limits how much an attacker can move out in a short span, giving the owner time to react.