"Previous messages will be readable by the attacker with the stolen subkey even if that subkey gets revoked..." This assumes the attacker also knows the key's

"Previous messages will be readable by the attacker with the stolen subkey even if that subkey gets revoked..." This assumes the attacker also knows the key's password. And we all use very strong, unique passwords on keys, right?