Isn't this a user problem rather than a protocol issue? First, the protocol doesn't specify that a user must destroy their private key when creating nLockTimed transactions. Second, since there's no guarantee that any given transaction will ever be successfully mined, it doesn't seem prudent to pre-sign transactions which sit off-chain and only become valid for broadcast and potential mining in some distant future whilst also deleting the private key. If this destructive behaviour can be condoned, it beggars belief that zero conf transactions are considered unsafe.
About destroying the keys, there are some companies that provide multisig addresses and a pre-signed timelocked transaction to allow users to withdraw their balance should the service suddenly go down. If the service went down and this change happened, those users would no longer be able to access their coins.