I can believe that is the case, but that just moves the attack vector to within Keybase's network, it doesn't mitigate it completely.