The difference is: with physical access, "they" are in control (during import). Importing over the internet, the user is in control (by using proper encryption)

The difference is: with physical access, "they" are in control (during import). Importing over the internet, the user is in control (by using proper encryption). If they beat encryption, everything is over anyway.