Terrifying but understandable. We need better ways to stop this but I'm not sure how... In the meantime, store your private keys on a security device like a Yu

Terrifying but understandable. We need better ways to stop this but I'm not sure how... In the meantime, store your private keys on a security device like a YubiKey. I use it simultaneously for all signing, encrypting, and authenticating (SSH as well as PAM to my workstations). Be sure to set a strong PIN on the device. And have a backup!