Comment by bob1029

PKI is insufficient protection in this case. If someone obtains the hardware and has a few years to sit on it, it is possible that private keys can eventually be broken (or compromised via other channels).