I was wondering the same thing ... shouldn't a design goal for the signing mechanism be to make it impossible to derive signing capability without access to som

I was wondering the same thing ... shouldn't a design goal for the signing mechanism be to make it impossible to derive signing capability without access to some secret not present on the device?