that's not true, even with their BYOK you export the key from one HSM under a shared key and then import it to another device