I'm not sure keys are much of a barrier, still not really sure. It's just a password you can't change. They don't have to store it that safely like a bitcoin key, they can just put it into Google drive or whatever