What about...just providing a desktop app to receive all the data and do all the computation needed? Or the same thing in your phone. What are the exact dangers of these two approaches? And dangers to whom?
Then they would have those keys. Phone security has gotten a lot better in 14 years, but it hasn’t always been great, and desktop security is still not so awesome.