Fair, but if the secret is exportable, then it loses a ton of its power. If you are worried about state level activity, have it stored in a single place that c

Fair, but if the secret is exportable, then it loses a ton of its power. If you are worried about state level activity, have it stored in a single place that can be compelled by law to disclose it and that is off the table for you. Which, sure, you can argue that there are still hardware tokens for people. But that is itself a signal, no?