Compromised wallet holding ENS NFT

I got hacked in January, multiple wallets got drained, very upsetting.

One of the wallets has an ENS domain I'd like to keep and consider valuable (they didn't transfer it) – it's currently in the expiry grace period. I would need to transfer eth to the wallet though to be able to renew and transfer it to a non-compromised wallet – is it likely these funds would be instantly drained?

Do you think it would be better to wait until the name fully expires and then buy it with a different wallet (risk being somebody else scalps it first).

Any other options?

Thankfully 75% of my crypto was secured through ledger/locked up in staking.