Easy, all the bad guys need to do is access whatever system stores the decryption keys.