You still need your original OWNER key to do the recovery process. There is no way to access/recover an account without a valid key.
So are you saying, if the account is compromised and someone already changed the owner key, then we can still use the old owner key because that is valid ?
You can use the old owner key to start the recovery process, but the recovery account must verify it.
Even the OLD owner key will work... but if you don't have the OLD one then there is nothing that can be done.