We need to assume a threat model today where Advanced Persistent Threats can seize private keys from hosting providers and US companies. Both secret court orders and hypervizor exploits are part of this threat profile. This threat is greater from smaller companies. Large companies will be better able to resist secret court orders.