But you add a password to the key, so it's the same. And not everyone saves it to disk. My ssh key is my gpg key. It's stored on a yubikey and can't ever leave

But you add a password to the key, so it's the same. And not everyone saves it to disk. My ssh key is my gpg key. It's stored on a yubikey and can't ever leave it. If I do a `git pull` then my yubikey flashes and I have to tap it to allow that connection to happen. Steal my yubikey, well you can't unlock it. Hack my laptop and you can't tap the key.