Comment by darkwater

In-transit encryption protects you against this attack scenario specifically (if you own the keys obviously).