That’s my thesis. I’m a non technical when it comes to comp sci but it seems that if entropy is sufficient in key generation and the machine isn’t compromised then the protection of the underlying cryptography is fully sufficient.