He said almost impossible to imagine. It really was an extremely hyperbolic statement. I've never done security work but I've helped develop plans for when primary and secondary keys are stolen. It's something that should have been imagined, not "almost impossible to imagine".

I think it's actually pretty easy to imagine a scenario where private encryption keys were stolen.