[mozzieman]

That is true, there is no silver bullet. For the people like me that know and have multiple keys in multiple secure locations are probably mostly fine, other solutions on government och bank websites is that they need somekind of formal verification before giving you a new key. There are always tradeoffs regardless of solution, depends on what you value.