Comment by Rygian

> Safe from server leaks. Because servers only keep public keys, servers are less valuable targets for hackers.

It's still an attack scenario to keep in mind. If a server can be tricked into storing the wrong public key, authentication is defeated.