Are people only just realising this? I would only ever use agent forwarding to a trusted host exactly because of what it does - put a socket on that host that

Are people only just realising this? I would only ever use agent forwarding to a trusted host exactly because of what it does - put a socket on that host that responds with your SSH key... Anyone on that host with root has access to your key.