Just as importantly, they use that key very infrequently which allows for a great deal more ceremony around when it's taken out and a lot more restriction around who has access to it. I'd expect that the key is only kept on air-gapped systems, for instance.