because your private key never needs to be compromised, even if your server is breached, because it never needs to be on the server. That said, I agree that if

because your private key never needs to be compromised, even if your server is breached, because it never needs to be on the server. That said, I agree that if the PK is only used for this single server, you have bigger problems than its loss if your server is breached.