[bombcar]

The trick is they can just take over maintaining the canary themselves after black-bagging you.

But in general the idea works - in theory.

[gary_0]

The point of a canary is that it's cryptographically signed, and it's possible to set up a duress passphrase that will delete the key when entered, so if everything works correctly an unauthorized party can't keep posting signed canaries.