Why stop there? If you're not root, you're not secure either. For example, if someone else is root, they can do whatever they want with your locally generated

Why stop there? If you're not root, you're not secure either. For example, if someone else is root, they can do whatever they want with your locally generated keys, upto and including sending them to the NSA with a little bow on top. Even if you are root it's no guarantee, thank you rootkits :/ As with all things security, sometimes it comes down to trust and legal protections.