The offline key isn't used for encryption, only signing. In this case, signing the subkeys, which are used for encryption (or auth, or signing). Really not all

The offline key isn't used for encryption, only signing. In this case, signing the subkeys, which are used for encryption (or auth, or signing). Really not all that different from past days of having a dsa key with an el gamal subkey for encryption.