That's why this exists, though. You can't compromise the person if the hardware signing/check are done via software that's connected to a server. There's nothin

That's why this exists, though. You can't compromise the person if the hardware signing/check are done via software that's connected to a server. There's nothing a person can do to override that if the hardware doesn't send back the right key.