[antonvs]

But again, that’s the Mossad scenario - NSA in this case. You’re essentially reinforcing the OP point. There are three threat models given in Figure 1 of the OP doc, and what you’re saying really only applies to the third.

[kragen]

No, their Mossad threat model is that the Mossad wants to kill particular people, not steal the passwords of literally every single person on Earth.