@ljrk @GossiTheDog This answer triggers me, did you forget a /s?
The private key stored with google (or any other such service) is encrypted with what? A private key stored on a Secure Element, never exportable or used against the users will?
Or with the users mother maiden name and the ability to read an SMS that was sent to the users mobile phone number?