You raise an interesting point! Maybe everything should have access to everything, and then you keep your _real_ secrets, like encryption keys, on dedicated ha

You raise an interesting point! Maybe everything should have access to everything, and then you keep your _real_ secrets, like encryption keys, on dedicated hardware that locks away the key to the outside world and only does signing. Like a Trezor bitcoin wallet or secure enclave on iOS.