Sure, but is your system compromised because someone left a key in plaintext? Attack surface is finite and can be meaningfully reduced.