1kB/s is pathetically low? You can exfiltrate a root CA private key that is valid for a decade in 3-4 s with that.

And these surprising attack vectors demonstrate that there will always be another hole in your protection. Even if you account for people-bed attacks, and air-gap your system better, there is always something else you didn't think of yet.