shouldn't/couldn't the publisher who own the key then just deactivate the key if the source of the money is found to be a laundered source?

I imagine they'd rather avoid the whole mess entirely