How do you make sure that only the original owner of a P2PK can swap for the new coin, and not one who also found the private key? Isn't that private key the on

How do you make sure that only the original owner of a P2PK can swap for the new coin, and not one who also found the private key? Isn't that private key the only thing that can be required for authorizing the swap?