Comment by pheroden

If a secure server is compromised, then none of this matters. You have to trust someone at some point.