A lot of attacks on cryptosystems involve things such as being able to encrypt whatever you want with the private key, being able to generate lots of messages e

A lot of attacks on cryptosystems involve things such as being able to encrypt whatever you want with the private key, being able to generate lots of messages encrypted with the private key, or being able to observe the errors that occur when decrypting a slightly wrong encrypted message. By allowing anyone to encrypt a file to the government's private key, you're vastly increasing the chances that one of these attacks goes from infeasable to easily doable. Right now, if someone were to find a chosen plaintext attack on AES, they could find someone who will encrypt things with their key, get them to encrypt the chosen plaintext, and then break other things that person had encrypted. If we used the proposed system, then the chosen plaintext attack would allow me to encrypt the plaintext on my own, and then use it to break everything in the world that was encrypted.